<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_7{
style=filled;
color=gray75;
204[label="118.56.46.84;d;121pkt 121fpkt", shape=diamond, color=yellow];
stat7[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.129.28:*, 118.56.46.84:443}[99.1736%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 60802: (0.413223%)&lt;BR/&gt; 49608: (0.413223%)&lt;BR/&gt; 49607: (0.413223%)&lt;BR/&gt; 49606: (0.413223%)&gt;];
}
204--2211[label="0.00826446;1pkt 1fpkt"];
204--8441[label="0.00826446;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="118.56.46.84" dst_port="443" src_ip="198.45.129.28"/>
    </slice>
    <from sec="1284009147" usec="0"/>
    <to sec="1284009226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="44860552" usec="0"/>
    <to sec="44860552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_10{
style=filled;
color=gray75;
425[label="148.36.213.131;d;129pkt 129fpkt", shape=diamond, color=yellow];
427[label="40.254.89.114;s;1pkt 1fpkt", shape=diamond, color=yellow];
6618[label="148.36.213.131;d;43pkt 43fpkt", shape=hexagon, color=black];
stat10[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20129, 148.36.213.131:20129}[65.8915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (78.3237%)&lt;BR/&gt; 7024: (1.7341%)&lt;BR/&gt; 2608: (1.7341%)&lt;BR/&gt; 0: (1.15607%)&lt;BR/&gt; 1873: (0.867052%)&gt;];
}
425--427[label="1;1pkt 1fpkt"];
425--5112[label="0.00775194;1pkt 1fpkt"];
425--6618[label="1;43pkt 43fpkt"];
425--8589[label="0.00775194;1pkt 1fpkt"];
425--8872[label="0.00775194;1pkt 1fpkt"];
425--9515[label="0.00775194;1pkt 1fpkt"];
425--13815[label="0.00775194;1pkt 1fpkt"];
425--16344[label="0.00775194;1pkt 1fpkt"];
427--6618[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.213.131" dst_port="20129" src_port="20129"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_11{
style=filled;
color=gray75;
466[label="148.36.85.225;s;110pkt 110fpkt", shape=diamond, color=yellow];
stat11[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.85.225:8090, *:*}[98.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8090: (49.0909%)&lt;BR/&gt; 80: (0.909091%)&lt;BR/&gt; 60782: (0.454545%)&lt;BR/&gt; 58906: (0.454545%)&lt;BR/&gt; 56942: (0.454545%)&gt;];
}
466--8884[label="0.00909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.36.85.225" src_port="8090"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
638[label="167.190.108.103;d;2pkt 2fpkt", shape=diamond, color=yellow];
641[label="169.160.163.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
4897[label="38.187.116.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
7238[label="167.190.108.103;d;2pkt 2fpkt", shape=hexagon, color=black];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.187.116.152:80, 167.190.108.103:51438}[50%]&lt;BR/&gt;{169.160.163.157:80, 167.190.108.103:51414}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51438: (25%)&lt;BR/&gt; 51414: (25%)&gt;];
}
638--641[label="1;1pkt 1fpkt"];
638--4897[label="1;1pkt 1fpkt"];
638--7238[label="1;2pkt 2fpkt"];
641--7238[label="1;1pkt 1fpkt"];
4897--7238[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.103" dst_port="51414" src_ip="169.160.163.157" src_port="80"/>
      <filter dst_ip="167.190.108.103" dst_port="51438" src_ip="38.187.116.152" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="40.231.197.161"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284008427" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="64.6.185.157"/>
      <from sec="1284009049" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284009049" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32357,2.45758,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
1182[label="170.130.59.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
1183[label="167.190.30.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
6774[label="170.130.59.141;d;1pkt 1fpkt", shape=hexagon, color=black];
16161[label="167.190.30.3;1pkt 1fpkt", shape=invhouse, color=bisque];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.30.3:1726, 170.130.59.141:15032}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15032: (50%)&lt;BR/&gt; 1726: (50%)&gt;];
}
1182--1183[label="1;1pkt 1fpkt"];
1182--6774[label="1;1pkt 1fpkt"];
1182--16161[label="1;1pkt 1fpkt"];
1183--6774[label="1;1pkt 1fpkt"];
1183--16161[label="1;1pkt 1fpkt"];
6774--16161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.130.59.141" dst_port="15032" src_ip="167.190.30.3" src_port="1726"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_16{
style=filled;
color=gray75;
1131[label="148.52.179.222;s;75pkt 75fpkt", shape=diamond, color=yellow];
1193[label="20.132.4.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
7050[label="20.132.4.140;d;1pkt 1fpkt", shape=hexagon, color=black];
stat16[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.179.222:11216, *:*}[88%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11216: (44.1558%)&lt;BR/&gt; 43269: (5.84416%)&lt;BR/&gt; 59327: (1.94805%)&lt;BR/&gt; 19255: (1.2987%)&lt;BR/&gt; 61869: (0.649351%)&gt;];
}
1131--1193[label="1;1pkt 1fpkt"];
1131--7050[label="1;1pkt 1fpkt"];
1193--7050[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.52.179.222" src_port="11216"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="64.80.133.137"/>
      <from sec="1284009004" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009004" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
138[label="167.190.108.64;d;97pkt 97fpkt", shape=diamond, color=yellow];
1368[label="65.176.7.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
1643[label="2.233.15.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
1660[label="168.115.106.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
1710[label="0.165.194.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
1810[label="38.73.243.94;s;2pkt 2fpkt", shape=diamond, color=yellow];
1830[label="3.195.70.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
3064[label="21.35.166.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
3779[label="16.146.97.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
5778[label="69.180.253.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
5966[label="0.4.165.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
7175[label="167.190.108.64;d;85pkt 85fpkt", shape=hexagon, color=black];
7564[label="2.233.15.2;s;1pkt 1fpkt", shape=hexagon, color=black];
7802[label="38.73.243.94;s;2pkt 2fpkt", shape=hexagon, color=black];
8958[label="2.233.15.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12977[label="16.146.97.219;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15846[label="16.146.97.219;1pkt 1fpkt", shape=invtriangle, color=brown];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17788, 167.190.108.64:10991}[30.9278%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10991: (47.4874%)&lt;BR/&gt; 17788: (15.0754%)&lt;BR/&gt; 8400: (6.03015%)&lt;BR/&gt; 8800: (2.76382%)&lt;BR/&gt; 1223: (2.51256%)&gt;];
}
138--1368[label="1;1pkt 1fpkt"];
138--1643[label="1;1pkt 1fpkt"];
138--1660[label="1;1pkt 1fpkt"];
138--1710[label="1;1pkt 1fpkt"];
138--1810[label="1;2pkt 2fpkt"];
138--1830[label="1;1pkt 1fpkt"];
138--3064[label="1;1pkt 1fpkt"];
138--3779[label="1;1pkt 1fpkt"];
138--5778[label="1;1pkt 1fpkt"];
138--5966[label="1;1pkt 1fpkt"];
138--7175[label="1;85pkt 85fpkt"];
138--7564[label="1;1pkt 1fpkt"];
138--7802[label="1;2pkt 2fpkt"];
138--8958[label="1;1pkt 1fpkt"];
138--12977[label="1;1pkt 1fpkt"];
138--15846[label="1;1pkt 1fpkt"];
1368--7175[label="1;1pkt 1fpkt"];
1643--7175[label="1;1pkt 1fpkt"];
1643--7564[label="1;1pkt 1fpkt"];
1643--8958[label="1;1pkt 1fpkt"];
1660--7175[label="1;1pkt 1fpkt"];
1710--7175[label="1;1pkt 1fpkt"];
1810--7175[label="1;2pkt 2fpkt"];
1810--7802[label="1;2pkt 2fpkt"];
1830--7175[label="1;1pkt 1fpkt"];
3064--7175[label="1;1pkt 1fpkt"];
3779--7175[label="1;1pkt 1fpkt"];
3779--12977[label="1;1pkt 1fpkt"];
3779--15846[label="1;1pkt 1fpkt"];
5778--7175[label="1;1pkt 1fpkt"];
5966--7175[label="1;1pkt 1fpkt"];
7175--7564[label="1;1pkt 1fpkt"];
7175--7802[label="1;2pkt 2fpkt"];
7175--8958[label="1;1pkt 1fpkt"];
7175--12977[label="1;1pkt 1fpkt"];
7175--15846[label="1;1pkt 1fpkt"];
7564--8958[label="1;1pkt 1fpkt"];
12977--15846[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.64" dst_port="10991" src_port="17788"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="33.78.23.12"/>
      <from sec="1284008407" usec="0"/>
      <to sec="1284008428" usec="0"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284008428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="33.78.23.12"/>
      <from sec="1284008407" usec="0"/>
      <to sec="1284008428" usec="0"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284008428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
1408[label="68.26.132.164;s;6pkt 6fpkt", shape=diamond, color=yellow];
1409[label="198.45.61.93;d;7pkt 7fpkt", shape=diamond, color=yellow];
6818[label="198.45.61.93;d;5pkt 5fpkt", shape=hexagon, color=black];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.26.132.164:80, 198.45.61.93:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53647: (8.33333%)&lt;BR/&gt; 40829: (8.33333%)&lt;BR/&gt; 39209: (8.33333%)&lt;BR/&gt; 35534: (8.33333%)&gt;];
}
1408--1409[label="1;6pkt 6fpkt"];
1408--6818[label="1;5pkt 5fpkt"];
1409--6818[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.61.93" src_ip="68.26.132.164" src_port="80"/>
    </slice>
    <from sec="1284008409" usec="0"/>
    <to sec="1284008613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
1437[label="199.56.56.3;d;2pkt 2fpkt", shape=diamond, color=yellow];
1438[label="42.246.26.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
6822[label="199.56.56.3;d;2pkt 2fpkt", shape=hexagon, color=black];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.246.26.219:80, 199.56.56.3:36187}[50%]&lt;BR/&gt;{24.70.111.242:80, 199.56.56.3:37547}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36187: (30%)&lt;BR/&gt; 37547: (20%)&gt;];
}
1437--1438[label="1;1pkt 1fpkt"];
1437--6822[label="1;2pkt 2fpkt"];
1438--6822[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.3" dst_port="37547" src_ip="24.70.111.242" src_port="80"/>
      <filter dst_ip="199.56.56.3" dst_port="36187" src_ip="42.246.26.219" src_port="80"/>
    </slice>
    <from sec="1284008413" usec="0"/>
    <to sec="1284009215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="32.28.27.239"/>
      <from sec="1284008422" usec="0"/>
      <to sec="1284008463" usec="0"/>
    </slice>
    <from sec="1284008422" usec="0"/>
    <to sec="1284008463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.28.27.239"/>
      <from sec="1284008422" usec="0"/>
      <to sec="1284008463" usec="0"/>
    </slice>
    <from sec="1284008422" usec="0"/>
    <to sec="1284008463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="223.4.240.97"/>
      <from sec="1284008436" usec="0"/>
      <to sec="1284008466" usec="0"/>
    </slice>
    <from sec="1284008436" usec="0"/>
    <to sec="1284008466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
1293[label="199.56.50.107;s;335pkt 335fpkt", shape=diamond, color=yellow];
1521[label="42.245.145.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
6843[label="42.245.145.70;d;1pkt 1fpkt", shape=hexagon, color=black];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.50.107:53, *:*}[48.6567%]&lt;BR/&gt;{199.56.50.107:25, *:*}[25.9701%]&lt;BR/&gt;{199.56.50.107:*, *:25}[20.2985%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (24.9258%)&lt;BR/&gt; 25: (22.997%)&lt;BR/&gt; 80: (2.22552%)&lt;BR/&gt; 65210: (0.445104%)&lt;BR/&gt; 32768: (0.296736%)&gt;];
}
1293--1521[label="1;1pkt 1fpkt"];
1293--3383[label="0.00298507;1pkt 1fpkt"];
1293--3462[label="0.00895522;3pkt 3fpkt"];
1293--3865[label="0.00298507;1pkt 1fpkt"];
1293--6843[label="1;1pkt 1fpkt"];
1293--7644[label="0.00895522;3pkt 3fpkt"];
1293--7747[label="0.00298507;1pkt 1fpkt"];
1293--8788[label="0.00298507;1pkt 1fpkt"];
1293--8901[label="0.00597015;2pkt 2fpkt"];
1293--8914[label="0.0208955;7pkt 7fpkt"];
1293--8918[label="0.0119403;4pkt 4fpkt"];
1521--6843[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.56.50.107" src_port="53"/>
      <filter src_ip="199.56.50.107" src_port="25"/>
      <filter dst_port="25" src_ip="199.56.50.107"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
1280[label="164.12.248.120;d;270pkt 270fpkt", shape=diamond, color=yellow];
1522[label="21.240.217.211;s;2pkt 2fpkt", shape=diamond, color=yellow];
12870[label="21.240.217.211;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15789[label="21.240.217.211;3pkt 3fpkt", shape=invtriangle, color=brown];
17520[label="21.240.217.211;3pkt 3fpkt", shape=invhouse, color=bisque];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.12.248.120:6346}[22.963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (12.9893%)&lt;BR/&gt; 5938: (5.16014%)&lt;BR/&gt; 0: (3.20285%)&lt;BR/&gt; 23179: (1.60142%)&lt;BR/&gt; 2650: (1.24555%)&gt;];
}
1280--1522[label="1;2pkt 2fpkt"];
1280--12870[label="1;3pkt 3fpkt"];
1280--15789[label="1;3pkt 3fpkt"];
1280--17520[label="1;3pkt 3fpkt"];
1522--12870[label="0.5;1pkt 1fpkt"];
1522--15789[label="0.5;1pkt 1fpkt"];
1522--17520[label="0.5;1pkt 1fpkt"];
12870--15789[label="1;3pkt 3fpkt"];
12870--17520[label="1;3pkt 3fpkt"];
15789--17520[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="164.12.248.120" dst_port="6346"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
1526[label="69.208.137.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
1527[label="131.60.151.126;s;21pkt 21fpkt", shape=diamond, color=yellow];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.151.126:26674, *:*}[38.0952%]&lt;BR/&gt;{131.60.151.126:4160, *:*}[28.5714%]&lt;BR/&gt;{131.60.151.126:49165, *:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26674: (20.4545%)&lt;BR/&gt; 4160: (13.6364%)&lt;BR/&gt; 49165: (11.3636%)&lt;BR/&gt; 14520: (11.3636%)&lt;BR/&gt; 6654: (4.54545%)&gt;];
}
1526--1527[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="131.60.151.126" src_port="26674"/>
      <filter src_ip="131.60.151.126" src_port="4160"/>
      <filter src_ip="131.60.151.126" src_port="49165"/>
    </slice>
    <from sec="1284008441" usec="0"/>
    <to sec="1284009224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
709[label="167.190.108.115;d;106pkt 106fpkt", shape=diamond, color=yellow];
1555[label="196.214.3.67;s;24pkt 24fpkt", shape=diamond, color=yellow];
5156[label="223.82.202.120;s;4pkt 4fpkt", shape=diamond, color=yellow];
8328[label="167.190.108.115;d;106pkt 106fpkt", shape=hexagon, color=black];
9493[label="196.214.2.28;33pkt 33fpkt", shape=pentagon, color=darkviolet];
12335[label="196.185.64.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15488[label="196.185.64.180;1pkt 1fpkt", shape=invtriangle, color=brown];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.214.2.28:80, 167.190.108.115:*}[31.1321%]&lt;BR/&gt;{196.214.3.67:80, 167.190.108.115:*}[22.6415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50177: (0.727273%)&lt;BR/&gt; 50292: (0.545455%)&lt;BR/&gt; 50278: (0.545455%)&lt;BR/&gt; 50273: (0.545455%)&gt;];
}
709--1555[label="1;24pkt 24fpkt"];
709--5156[label="1;4pkt 4fpkt"];
709--8328[label="1;106pkt 106fpkt"];
709--9493[label="1;33pkt 33fpkt"];
709--12335[label="1;1pkt 1fpkt"];
709--15488[label="1;1pkt 1fpkt"];
1555--8328[label="1;24pkt 24fpkt"];
5156--8328[label="1;4pkt 4fpkt"];
8328--9493[label="1;33pkt 33fpkt"];
8328--12335[label="1;1pkt 1fpkt"];
8328--15488[label="1;1pkt 1fpkt"];
12335--15488[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.115" src_ip="196.214.2.28" src_port="80"/>
      <filter dst_ip="167.190.108.115" src_ip="196.214.3.67" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.168.24.225"/>
      <from sec="1284008960" usec="0"/>
      <to sec="1284009038" usec="0"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284009038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
974[label="148.52.103.96;s;2pkt 2fpkt", shape=diamond, color=yellow];
1599[label="218.72.110.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
10789[label="148.52.103.96;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.103.96:0, *:0}[50%]&lt;BR/&gt;{148.52.103.96:19084, *:*}[50%]&lt;BR/&gt;{148.52.103.96:*, 64.138.138.83:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (40%)&lt;BR/&gt; 19084: (30%)&lt;BR/&gt; 61854: (15%)&lt;BR/&gt; 29149: (5%)&lt;BR/&gt; 14520: (5%)&gt;];
}
974--1599[label="1;1pkt 1fpkt"];
974--10789[label="0.5;1pkt 1fpkt"];
1599--10789[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="64.138.138.83" src_ip="148.52.103.96"/>
      <filter src_ip="148.52.103.96" src_port="19084"/>
      <filter src_ip="148.52.103.96"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
1623[label="164.12.241.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
1624[label="208.32.206.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
10210[label="208.32.206.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14218[label="208.32.206.66;2pkt 2fpkt", shape=invtriangle, color=brown];
16609[label="208.32.206.66;2pkt 2fpkt", shape=invhouse, color=bisque];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.32.206.66:80, 198.32.104.161:52695}[50%]&lt;BR/&gt;{208.32.206.66:80, 164.12.241.220:2248}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2248: (31.25%)&lt;BR/&gt; 52695: (18.75%)&gt;];
}
1623--1624[label="1;1pkt 1fpkt"];
1623--10210[label="1;1pkt 1fpkt"];
1623--14218[label="1;1pkt 1fpkt"];
1623--16609[label="1;1pkt 1fpkt"];
1624--10210[label="1;1pkt 1fpkt"];
1624--14218[label="1;1pkt 1fpkt"];
1624--16609[label="1;1pkt 1fpkt"];
10210--14218[label="1;2pkt 2fpkt"];
10210--16609[label="1;2pkt 2fpkt"];
14218--16609[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.12.241.220" dst_port="2248" src_ip="208.32.206.66" src_port="80"/>
      <filter dst_ip="198.32.104.161" dst_port="52695" src_ip="208.32.206.66" src_port="80"/>
    </slice>
    <from sec="1284008479" usec="0"/>
    <to sec="1284009253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.190.110.101"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009076" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="118.56.46.84"/>
      <from sec="1284009147" usec="0"/>
      <to sec="1284009226" usec="0"/>
    </slice>
    <from sec="1284009147" usec="0"/>
    <to sec="1284009226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
237[label="218.104.83.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
1659[label="148.175.154.196;s;3pkt 3fpkt", shape=diamond, color=yellow];
7187[label="218.104.83.100;d;1pkt 1fpkt", shape=hexagon, color=black];
8639[label="148.175.154.196;s;3pkt 3fpkt", shape=hexagon, color=black];
12602[label="148.175.154.196;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15634[label="148.175.154.196;3pkt 3fpkt", shape=invtriangle, color=brown];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.175.154.196:42380, 218.104.83.100:42380}[33.3333%]&lt;BR/&gt;{148.175.154.196:0, 29.107.178.177:0}[33.3333%]&lt;BR/&gt;{148.175.154.196:500, 29.107.178.177:9818}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42380: (42.8571%)&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 9818: (14.2857%)&lt;BR/&gt; 500: (14.2857%)&gt;];
}
237--1659[label="1;1pkt 1fpkt"];
237--7187[label="1;1pkt 1fpkt"];
237--8639[label="1;1pkt 1fpkt"];
237--12602[label="1;1pkt 1fpkt"];
237--15634[label="1;1pkt 1fpkt"];
1659--7187[label="1;1pkt 1fpkt"];
1659--8639[label="1;3pkt 3fpkt"];
1659--12602[label="1;3pkt 3fpkt"];
1659--15634[label="1;3pkt 3fpkt"];
7187--8639[label="1;1pkt 1fpkt"];
7187--12602[label="1;1pkt 1fpkt"];
7187--15634[label="1;1pkt 1fpkt"];
8639--12602[label="1;3pkt 3fpkt"];
8639--15634[label="1;3pkt 3fpkt"];
12602--15634[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="29.107.178.177" dst_port="9818" src_ip="148.175.154.196" src_port="500"/>
      <filter dst_ip="29.107.178.177" src_ip="148.175.154.196"/>
      <filter dst_ip="218.104.83.100" dst_port="42380" src_ip="148.175.154.196" src_port="42380"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009049" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
1511[label="169.117.40.69;d;12pkt 12fpkt", shape=diamond, color=yellow];
1749[label="198.32.86.135;s;209pkt 209fpkt", shape=diamond, color=yellow];
4575[label="202.10.20.145;d;11pkt 11fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.86.135:*, *:80}[43.0622%]&lt;BR/&gt;{198.32.86.135:*, *:443}[28.7081%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.4914%)&lt;BR/&gt; 443: (12.931%)&lt;BR/&gt; 53: (9.48276%)&lt;BR/&gt; 0: (7.32759%)&lt;BR/&gt; 123: (0.862069%)&gt;];
}
1511--1749[label="1;12pkt 12fpkt"];
1749--3899[label="0.00478469;1pkt 1fpkt"];
1749--4575[label="1;11pkt 11fpkt"];
1749--5357[label="0.00478469;1pkt 1fpkt"];
1749--8884[label="0.0287081;6pkt 6fpkt"];
1749--8894[label="0.0287081;6pkt 6fpkt"];
1749--8901[label="0.00956938;2pkt 2fpkt"];
1749--8902[label="0.0143541;3pkt 3fpkt"];
1749--8909[label="0.0191388;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="198.32.86.135"/>
      <filter dst_port="443" src_ip="198.32.86.135"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="199.56.33.114"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
576[label="167.190.9.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
1762[label="218.11.80.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
8316[label="218.11.80.142;s;1pkt 1fpkt", shape=hexagon, color=black];
11607[label="218.11.80.142;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15037[label="218.11.80.142;1pkt 1fpkt", shape=invtriangle, color=brown];
17096[label="218.11.80.142;1pkt 1fpkt", shape=invhouse, color=bisque];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.11.80.142:80, 167.190.9.134:51769}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51769: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
576--1762[label="1;1pkt 1fpkt"];
576--8316[label="1;1pkt 1fpkt"];
576--11607[label="1;1pkt 1fpkt"];
576--15037[label="1;1pkt 1fpkt"];
576--17096[label="1;1pkt 1fpkt"];
1762--8316[label="1;1pkt 1fpkt"];
1762--11607[label="1;1pkt 1fpkt"];
1762--15037[label="1;1pkt 1fpkt"];
1762--17096[label="1;1pkt 1fpkt"];
8316--11607[label="1;1pkt 1fpkt"];
8316--15037[label="1;1pkt 1fpkt"];
8316--17096[label="1;1pkt 1fpkt"];
11607--15037[label="1;1pkt 1fpkt"];
11607--17096[label="1;1pkt 1fpkt"];
15037--17096[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.9.134" dst_port="51769" src_ip="218.11.80.142" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="131.60.213.98"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009049" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
880[label="167.190.162.103;d;3pkt 3fpkt", shape=diamond, color=yellow];
1863[label="25.106.224.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
1887[label="18.197.63.125;s;2226pkt 2226fpkt", shape=diamond, color=yellow];
3937[label="52.194.180.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
6712[label="167.190.162.103;d;3pkt 3fpkt", shape=hexagon, color=black];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.197.63.125:80, *:*}[99.9102%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9329%)&lt;BR/&gt; 49195: (0.134288%)&lt;BR/&gt; 49153: (0.134288%)&lt;BR/&gt; 40960: (0.134288%)&lt;BR/&gt; 16390: (0.134288%)&gt;];
}
880--1863[label="1;1pkt 1fpkt"];
880--1887[label="0.333333;1pkt 1fpkt"];
880--3937[label="1;1pkt 1fpkt"];
880--6712[label="1;3pkt 3fpkt"];
1863--6712[label="1;1pkt 1fpkt"];
1887--6712[label="0.333333;1pkt 1fpkt"];
3937--6712[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="18.197.63.125" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
185[label="167.190.110.101;s;28pkt 28fpkt", shape=diamond, color=yellow];
1971[label="28.180.0.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
7005[label="28.180.0.176;d;1pkt 1fpkt", shape=hexagon, color=black];
8604[label="167.190.110.101;s;28pkt 28fpkt", shape=hexagon, color=black];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.110.101:5041, *:5041}[53.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (74.1379%)&lt;BR/&gt; 49716: (3.44828%)&lt;BR/&gt; 8006: (3.44828%)&lt;BR/&gt; 0: (3.44828%)&lt;BR/&gt; 61403: (1.72414%)&gt;];
}
185--1971[label="1;1pkt 1fpkt"];
185--7005[label="1;1pkt 1fpkt"];
185--8604[label="1;28pkt 28fpkt"];
1971--7005[label="1;1pkt 1fpkt"];
1971--8604[label="1;1pkt 1fpkt"];
7005--8604[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5041" src_ip="167.190.110.101" src_port="5041"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
1998[label="198.45.137.3;s;773pkt 773fpkt", shape=diamond, color=yellow];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.137.3:21048, *:*}[48.3829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21048: (24.1915%)&lt;BR/&gt; 6346: (0.646831%)&lt;BR/&gt; 50545: (0.258732%)&lt;BR/&gt; 14128: (0.258732%)&lt;BR/&gt; 80: (0.258732%)&gt;];
}
1998--6145[label="0.0128205;1pkt 1fpkt"];
1998--8884[label="0.00258732;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="198.45.137.3" src_port="21048"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
1146[label="167.190.29.143;d;4pkt 4fpkt", shape=diamond, color=yellow];
2047[label="198.248.26.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
7027[label="167.190.29.143;d;4pkt 4fpkt", shape=hexagon, color=black];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.146.36.99:80, 167.190.29.143:49554}[25%]&lt;BR/&gt;{21.146.36.110:80, 167.190.29.143:49553}[25%]&lt;BR/&gt;{198.248.26.167:554, 167.190.29.143:53713}[25%]&lt;BR/&gt;{21.146.44.226:80, 167.190.29.143:49551}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 53713: (16.6667%)&lt;BR/&gt; 554: (16.6667%)&lt;BR/&gt; 49554: (11.1111%)&lt;BR/&gt; 49553: (11.1111%)&gt;];
}
1146--2047[label="1;1pkt 1fpkt"];
1146--7027[label="1;4pkt 4fpkt"];
2047--7027[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.29.143" dst_port="49551" src_ip="21.146.44.226" src_port="80"/>
      <filter dst_ip="167.190.29.143" dst_port="53713" src_ip="198.248.26.167" src_port="554"/>
      <filter dst_ip="167.190.29.143" dst_port="49553" src_ip="21.146.36.110" src_port="80"/>
      <filter dst_ip="167.190.29.143" dst_port="49554" src_ip="21.146.36.99" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="64.64.250.3"/>
      <from sec="1284009103" usec="0"/>
      <to sec="1284009173" usec="0"/>
    </slice>
    <from sec="1284009103" usec="0"/>
    <to sec="1284009173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
284[label="167.190.108.137;d;46pkt 46fpkt", shape=diamond, color=yellow];
2095[label="122.133.211.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
2454[label="183.103.96.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
2611[label="40.26.225.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
2685[label="2.146.227.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
3691[label="120.0.26.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
3962[label="21.35.176.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
4184[label="40.208.155.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
4619[label="122.133.156.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
5470[label="19.110.158.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
6152[label="21.35.36.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
7571[label="167.190.108.137;d;34pkt 34fpkt", shape=hexagon, color=black];
7719[label="183.103.96.127;s;1pkt 1fpkt", shape=hexagon, color=black];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.190.108.137:3151}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3151: (43.956%)&lt;BR/&gt; 1066: (4.94505%)&lt;BR/&gt; 1221: (2.1978%)&lt;BR/&gt; 59129: (1.64835%)&lt;BR/&gt; 58310: (1.64835%)&gt;];
}
284--2095[label="1;1pkt 1fpkt"];
284--2454[label="1;1pkt 1fpkt"];
284--2611[label="1;1pkt 1fpkt"];
284--2685[label="1;1pkt 1fpkt"];
284--3691[label="1;1pkt 1fpkt"];
284--3962[label="1;1pkt 1fpkt"];
284--4184[label="1;1pkt 1fpkt"];
284--4619[label="1;1pkt 1fpkt"];
284--5470[label="1;1pkt 1fpkt"];
284--6152[label="1;1pkt 1fpkt"];
284--7571[label="1;34pkt 34fpkt"];
284--7719[label="1;1pkt 1fpkt"];
2095--7571[label="1;1pkt 1fpkt"];
2454--7571[label="1;1pkt 1fpkt"];
2454--7719[label="1;1pkt 1fpkt"];
2611--7571[label="1;1pkt 1fpkt"];
2685--7571[label="1;1pkt 1fpkt"];
3691--7571[label="1;1pkt 1fpkt"];
3962--7571[label="1;1pkt 1fpkt"];
4184--7571[label="1;1pkt 1fpkt"];
4619--7571[label="1;1pkt 1fpkt"];
5470--7571[label="1;1pkt 1fpkt"];
6152--7571[label="1;1pkt 1fpkt"];
7571--7719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.137" dst_port="3151"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
2145[label="167.190.47.4;s;39pkt 39fpkt", shape=diamond, color=yellow];
2146[label="2.3.39.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
5022[label="51.96.244.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
7672[label="2.3.39.15;d;1pkt 1fpkt", shape=hexagon, color=black];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.47.4:1602, *:17788}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1602: (50%)&lt;BR/&gt; 17788: (35.7143%)&lt;BR/&gt; 11418: (3.57143%)&lt;BR/&gt; 58110: (2.38095%)&lt;BR/&gt; 26706: (1.19048%)&gt;];
}
2145--2146[label="1;1pkt 1fpkt"];
2145--5022[label="1;1pkt 1fpkt"];
2145--7672[label="1;1pkt 1fpkt"];
2146--7672[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="167.190.47.4" src_port="1602"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
2350[label="33.73.181.218;d;8pkt 8fpkt", shape=diamond, color=yellow];
2351[label="148.52.112.2;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.112.2:80, 33.73.181.218:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61248: (6.66667%)&lt;BR/&gt; 53144: (6.66667%)&lt;BR/&gt; 48293: (6.66667%)&lt;BR/&gt; 45331: (6.66667%)&gt;];
}
2350--2351[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.181.218" src_ip="148.52.112.2" src_port="80"/>
    </slice>
    <from sec="1284008738" usec="0"/>
    <to sec="1284009150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="223.4.240.97"/>
      <from sec="1284008436" usec="0"/>
      <to sec="1284008466" usec="0"/>
    </slice>
    <from sec="1284008436" usec="0"/>
    <to sec="1284008466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="21.168.24.225"/>
      <from sec="1284008960" usec="0"/>
      <to sec="1284009038" usec="0"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284009038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="23.192.191.70"/>
      <from sec="1284008805" usec="0"/>
      <to sec="1284008887" usec="0"/>
    </slice>
    <from sec="1284008805" usec="0"/>
    <to sec="1284008887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.196.88.216"/>
      <from sec="1284008939" usec="0"/>
      <to sec="1284009064" usec="0"/>
    </slice>
    <from sec="1284008939" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
2535[label="174.147.156.54;d;10pkt 10fpkt", shape=diamond, color=yellow];
2536[label="145.105.52.165;s;10pkt 10fpkt", shape=diamond, color=yellow];
7164[label="174.147.156.54;d;10pkt 10fpkt", shape=hexagon, color=black];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.52.165:*, 174.147.156.54:80}[60%]&lt;BR/&gt;{145.105.52.165:*, 174.147.156.54:443}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 443: (20%)&lt;BR/&gt; 49968: (5%)&lt;BR/&gt; 49967: (5%)&lt;BR/&gt; 49966: (5%)&gt;];
}
2535--2536[label="1;10pkt 10fpkt"];
2535--7164[label="1;10pkt 10fpkt"];
2536--7164[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="174.147.156.54" dst_port="80" src_ip="145.105.52.165"/>
      <filter dst_ip="174.147.156.54" dst_port="443" src_ip="145.105.52.165"/>
    </slice>
    <from sec="1284008534" usec="0"/>
    <to sec="1284008572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="169.118.212.136"/>
      <from sec="1284008847" usec="0"/>
      <to sec="1284008855" usec="0"/>
    </slice>
    <from sec="1284008847" usec="0"/>
    <to sec="1284008855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="22.130.56.135"/>
      <from sec="1284009194" usec="0"/>
      <to sec="1284009216" usec="0"/>
    </slice>
    <from sec="1284009194" usec="0"/>
    <to sec="1284009216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
2456[label="199.56.56.80;d;6pkt 6fpkt", shape=diamond, color=yellow];
2593[label="198.118.199.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
7147[label="199.56.56.80;d;6pkt 6fpkt", shape=hexagon, color=black];
7172[label="198.118.199.113;s;1pkt 1fpkt", shape=hexagon, color=black];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.139.41.161:80, 199.56.56.80:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 49964: (14.2857%)&lt;BR/&gt; 49993: (7.14286%)&lt;BR/&gt; 49991: (7.14286%)&lt;BR/&gt; 49990: (7.14286%)&gt;];
}
2456--2593[label="1;1pkt 1fpkt"];
2456--7147[label="1;6pkt 6fpkt"];
2456--7172[label="1;1pkt 1fpkt"];
2593--7147[label="1;1pkt 1fpkt"];
2593--7172[label="1;1pkt 1fpkt"];
7147--7172[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.80" src_ip="212.139.41.161" src_port="80"/>
    </slice>
    <from sec="1284008485" usec="0"/>
    <to sec="1284008681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
590[label="192.228.124.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
2657[label="198.32.66.157;s;21pkt 21fpkt", shape=diamond, color=yellow];
7230[label="192.228.124.69;d;1pkt 1fpkt", shape=hexagon, color=black];
8319[label="198.32.66.157;s;16pkt 16fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.66.157:0, *:0}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.7436%)&lt;BR/&gt; 123: (10.2564%)&gt;];
}
590--2657[label="1;1pkt 1fpkt"];
590--7230[label="1;1pkt 1fpkt"];
590--8319[label="1;1pkt 1fpkt"];
2657--7230[label="1;1pkt 1fpkt"];
2657--8319[label="1;16pkt 16fpkt"];
7230--8319[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="198.32.66.157"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
926[label="28.103.125.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
1078[label="199.172.216.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
2729[label="144.1.77.94;s;4pkt 4fpkt", shape=diamond, color=yellow];
4576[label="218.73.129.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.1.77.94:2244, 199.172.216.4:12154}[25%]&lt;BR/&gt;{144.1.77.94:2244, 28.103.125.28:50650}[25%]&lt;BR/&gt;{144.1.77.94:2244, 218.73.129.104:8241}[25%]&lt;BR/&gt;{144.1.77.94:1061, 133.238.8.213:25465}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2244: (42.8571%)&lt;BR/&gt; 50650: (14.2857%)&lt;BR/&gt; 12154: (14.2857%)&lt;BR/&gt; 8241: (14.2857%)&lt;BR/&gt; 25465: (7.14286%)&gt;];
}
926--2729[label="1;1pkt 1fpkt"];
1078--2729[label="1;1pkt 1fpkt"];
2729--4576[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.238.8.213" dst_port="25465" src_ip="144.1.77.94" src_port="1061"/>
      <filter dst_ip="218.73.129.104" dst_port="8241" src_ip="144.1.77.94" src_port="2244"/>
      <filter dst_ip="28.103.125.28" dst_port="50650" src_ip="144.1.77.94" src_port="2244"/>
      <filter dst_ip="199.172.216.4" dst_port="12154" src_ip="144.1.77.94" src_port="2244"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="199.56.56.103"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
2070[label="167.190.9.148;s;3pkt 3fpkt", shape=diamond, color=yellow];
2838[label="223.156.209.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
11722[label="167.190.9.148;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15113[label="167.190.9.148;3pkt 3fpkt", shape=invtriangle, color=brown];
17141[label="167.190.9.148;3pkt 3fpkt", shape=invhouse, color=bisque];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.9.148:50070, 170.139.142.103:80}[33.3333%]&lt;BR/&gt;{167.190.9.148:50069, 32.4.138.142:80}[33.3333%]&lt;BR/&gt;{167.190.9.148:49687, 223.156.209.142:8080}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.7692%)&lt;BR/&gt; 49687: (19.2308%)&lt;BR/&gt; 8080: (19.2308%)&lt;BR/&gt; 50070: (15.3846%)&lt;BR/&gt; 50069: (15.3846%)&gt;];
}
2070--2838[label="1;1pkt 1fpkt"];
2070--11722[label="1;3pkt 3fpkt"];
2070--15113[label="1;3pkt 3fpkt"];
2070--17141[label="1;3pkt 3fpkt"];
2838--11722[label="1;1pkt 1fpkt"];
2838--15113[label="1;1pkt 1fpkt"];
2838--17141[label="1;1pkt 1fpkt"];
11722--15113[label="1;3pkt 3fpkt"];
11722--17141[label="1;3pkt 3fpkt"];
15113--17141[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="223.156.209.142" dst_port="8080" src_ip="167.190.9.148" src_port="49687"/>
      <filter dst_ip="32.4.138.142" dst_port="80" src_ip="167.190.9.148" src_port="50069"/>
      <filter dst_ip="170.139.142.103" dst_port="80" src_ip="167.190.9.148" src_port="50070"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
2922[label="67.115.153.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
2923[label="167.190.66.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.66.220:49507, 67.115.153.52:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49507: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
2922--2923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="67.115.153.52" dst_port="443" src_ip="167.190.66.220" src_port="49507"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
2926[label="223.105.85.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
2927[label="148.175.174.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
8424[label="223.105.85.145;d;1pkt 1fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.175.174.102:1163, 223.105.85.145:8236}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8236: (50%)&lt;BR/&gt; 1163: (50%)&gt;];
}
2926--2927[label="1;1pkt 1fpkt"];
2926--8424[label="1;1pkt 1fpkt"];
2927--8424[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="223.105.85.145" dst_port="8236" src_ip="148.175.174.102" src_port="1163"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
1844[label="167.190.185.26;s;843pkt 843fpkt", shape=diamond, color=yellow];
2933[label="167.190.225.175;s;25pkt 25fpkt", shape=diamond, color=yellow];
3089[label="25.106.32.150;d;10pkt 10fpkt", shape=diamond, color=yellow];
6251[label="42.224.31.36;d;20pkt 20fpkt", shape=diamond, color=yellow];
7959[label="25.106.32.150;d;9pkt 9fpkt", shape=hexagon, color=black];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.185.26:0, *:0}[95.47%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.054%)&lt;BR/&gt; 995: (1.81918%)&lt;BR/&gt; 993: (0.661521%)&lt;BR/&gt; 389: (0.551268%)&lt;BR/&gt; 18561: (0.16538%)&gt;];
}
1844--2741[label="0.0023753;1pkt 1fpkt"];
1844--4626[label="0.00268097;1pkt 1fpkt"];
1844--4659[label="0.00352113;1pkt 1fpkt"];
1844--5175[label="0.003003;1pkt 1fpkt"];
1844--5180[label="0.00961538;1pkt 1fpkt"];
1844--6251[label="0.05;1pkt 1fpkt"];
1844--8106[label="0.00352113;1pkt 1fpkt"];
1844--8348[label="0.011236;1pkt 1fpkt"];
1844--8352[label="0.00271739;1pkt 1fpkt"];
2933--3089[label="1;10pkt 10fpkt"];
2933--6251[label="0.2;4pkt 4fpkt"];
2933--7959[label="1;9pkt 9fpkt"];
3089--7959[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="167.190.185.26"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.36.154.12"/>
      <from sec="1284008480" usec="0"/>
      <to sec="1284008774" usec="0"/>
    </slice>
    <from sec="1284008480" usec="0"/>
    <to sec="1284008774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="19.65.204.2"/>
      <from sec="1284009125" usec="0"/>
      <to sec="1284009205" usec="0"/>
    </slice>
    <from sec="1284009125" usec="0"/>
    <to sec="1284009205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
3279[label="42.241.80.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
3280[label="145.105.160.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
13346[label="145.105.160.244;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.160.244:80, 33.73.182.153:44790}[50%]&lt;BR/&gt;{145.105.160.244:80, 42.241.80.194:49525}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49525: (37.5%)&lt;BR/&gt; 44790: (12.5%)&gt;];
}
3279--3280[label="1;1pkt 1fpkt"];
3279--13346[label="1;1pkt 1fpkt"];
3280--13346[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.194" dst_port="49525" src_ip="145.105.160.244" src_port="80"/>
      <filter dst_ip="33.73.182.153" dst_port="44790" src_ip="145.105.160.244" src_port="80"/>
    </slice>
    <from sec="1284008624" usec="0"/>
    <to sec="1284009045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.233.227.92"/>
      <from sec="1284008885" usec="0"/>
      <to sec="1284008967" usec="0"/>
    </slice>
    <from sec="1284008885" usec="0"/>
    <to sec="1284008967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
3329[label="33.73.181.42;d;6pkt 6fpkt", shape=diamond, color=yellow];
3330[label="131.60.236.42;s;6pkt 6fpkt", shape=diamond, color=yellow];
7561[label="33.73.181.42;d;2pkt 2fpkt", shape=hexagon, color=black];
9772[label="131.60.236.42;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10984[label="144.1.64.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13972[label="131.60.236.42;10pkt 10fpkt", shape=invtriangle, color=brown];
16443[label="131.60.236.42;10pkt 10fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.236.42:80, 33.73.181.42:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65080: (5.55556%)&lt;BR/&gt; 55662: (5.55556%)&lt;BR/&gt; 52503: (5.55556%)&lt;BR/&gt; 45236: (5.55556%)&gt;];
}
3329--3330[label="1;6pkt 6fpkt"];
3329--9772[label="1;6pkt 6fpkt"];
3329--13972[label="1;6pkt 6fpkt"];
3329--16443[label="1;6pkt 6fpkt"];
3330--9772[label="1;6pkt 6fpkt"];
3330--13972[label="1;6pkt 6fpkt"];
3330--16443[label="1;6pkt 6fpkt"];
7561--9772[label="0.5;1pkt 1fpkt"];
7561--10984[label="1;1pkt 1fpkt"];
7561--13972[label="0.5;1pkt 1fpkt"];
7561--16443[label="0.5;1pkt 1fpkt"];
9772--13972[label="1;10pkt 10fpkt"];
9772--16443[label="1;10pkt 10fpkt"];
13972--16443[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.181.42" src_ip="131.60.236.42" src_port="80"/>
    </slice>
    <from sec="1284008493" usec="0"/>
    <to sec="1284009234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.52.179.146"/>
      <from sec="1284008672" usec="0"/>
      <to sec="1284008778" usec="0"/>
    </slice>
    <from sec="1284008672" usec="0"/>
    <to sec="1284008778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
3415[label="199.56.59.39;s;195pkt 195fpkt", shape=diamond, color=yellow];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.59.39:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3415--3825[label="0.00694444;1pkt 1fpkt"];
3415--3865[label="0.00512821;1pkt 1fpkt"];
3415--4659[label="0.00512821;1pkt 1fpkt"];
3415--7747[label="0.00512821;1pkt 1fpkt"];
3415--8014[label="0.00694444;1pkt 1fpkt"];
3415--8106[label="0.00512821;1pkt 1fpkt"];
3415--8788[label="0.00512821;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.56.59.39"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
3443[label="199.56.60.200;s;148pkt 148fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.60.200:0, *:0}[99.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3243%)&lt;BR/&gt; 12200: (0.337838%)&lt;BR/&gt; 8085: (0.337838%)&gt;];
}
3443--3825[label="0.00694444;1pkt 1fpkt"];
3443--3865[label="0.00675676;1pkt 1fpkt"];
3443--4499[label="0.00675676;1pkt 1fpkt"];
3443--4626[label="0.00675676;1pkt 1fpkt"];
3443--4659[label="0.00675676;1pkt 1fpkt"];
3443--5175[label="0.00675676;1pkt 1fpkt"];
3443--5180[label="0.00961538;1pkt 1fpkt"];
3443--7211[label="0.00675676;1pkt 1fpkt"];
3443--7747[label="0.00675676;1pkt 1fpkt"];
3443--8014[label="0.00694444;1pkt 1fpkt"];
3443--8032[label="0.00675676;1pkt 1fpkt"];
3443--8106[label="0.00675676;1pkt 1fpkt"];
3443--8348[label="0.011236;1pkt 1fpkt"];
3443--8788[label="0.00675676;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.56.60.200"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
2891[label="148.52.210.33;s;5pkt 5fpkt", shape=diamond, color=yellow];
3494[label="64.137.111.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
6039[label="20.165.115.90;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.210.33:51671, 69.233.229.130:57545}[20%]&lt;BR/&gt;{148.52.210.33:51671, 64.142.173.226:10177}[20%]&lt;BR/&gt;{148.52.210.33:51671, 64.137.111.237:10662}[20%]&lt;BR/&gt;{148.52.210.33:0, 20.165.115.90:0}[20%]&lt;BR/&gt;{148.52.210.33:51671, 20.165.115.90:63286}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51671: (37.5%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 63286: (12.5%)&lt;BR/&gt; 10662: (12.5%)&lt;BR/&gt; 57545: (6.25%)&gt;];
}
2891--3494[label="1;1pkt 1fpkt"];
2891--6039[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.165.115.90" dst_port="63286" src_ip="148.52.210.33" src_port="51671"/>
      <filter dst_ip="20.165.115.90" src_ip="148.52.210.33"/>
      <filter dst_ip="64.137.111.237" dst_port="10662" src_ip="148.52.210.33" src_port="51671"/>
      <filter dst_ip="64.142.173.226" dst_port="10177" src_ip="148.52.210.33" src_port="51671"/>
      <filter dst_ip="69.233.229.130" dst_port="57545" src_ip="148.52.210.33" src_port="51671"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
2144[label="167.190.47.4;d;9pkt 9fpkt", shape=diamond, color=yellow];
3530[label="2.3.39.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
5023[label="51.96.244.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.190.47.4:1602}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1602: (50%)&lt;BR/&gt; 58110: (9.09091%)&lt;BR/&gt; 11418: (9.09091%)&lt;BR/&gt; 26706: (4.54545%)&lt;BR/&gt; 20580: (4.54545%)&gt;];
}
2144--3530[label="1;1pkt 1fpkt"];
2144--5023[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.47.4" dst_port="1602"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
3547[label="140.156.123.107;d;19pkt 19fpkt", shape=diamond, color=yellow];
3548[label="148.52.147.210;s;28pkt 28fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.147.210:*, 140.156.123.107:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 65352: (2.12766%)&lt;BR/&gt; 64174: (2.12766%)&lt;BR/&gt; 63220: (2.12766%)&lt;BR/&gt; 61817: (2.12766%)&gt;];
}
3547--3548[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="140.156.123.107" dst_port="443" src_ip="148.52.147.210"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="131.60.228.102"/>
      <from sec="1284008416" usec="0"/>
      <to sec="1284008773" usec="0"/>
    </slice>
    <from sec="1284008416" usec="0"/>
    <to sec="1284008773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="33.73.182.136"/>
      <from sec="1284009061" usec="0"/>
      <to sec="1284009084" usec="0"/>
    </slice>
    <from sec="1284009061" usec="0"/>
    <to sec="1284009084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.0.152.60"/>
      <from sec="1284008608" usec="0"/>
      <to sec="1284009022" usec="0"/>
    </slice>
    <from sec="1284008608" usec="0"/>
    <to sec="1284009022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
3328[label="210.237.198.194;d;11pkt 11fpkt", shape=diamond, color=yellow];
3777[label="148.36.138.100;s;14pkt 14fpkt", shape=diamond, color=yellow];
7560[label="210.237.198.194;d;11pkt 11fpkt", shape=hexagon, color=black];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.138.100:443, 210.237.198.194:*}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 51756: (4.16667%)&lt;BR/&gt; 51755: (4.16667%)&lt;BR/&gt; 51754: (4.16667%)&lt;BR/&gt; 51753: (4.16667%)&gt;];
}
3328--3777[label="1;11pkt 11fpkt"];
3328--7560[label="1;11pkt 11fpkt"];
3777--7560[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="210.237.198.194" src_ip="148.36.138.100" src_port="443"/>
    </slice>
    <from sec="1284008656" usec="0"/>
    <to sec="1284008735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
3332[label="42.241.80.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
3782[label="131.60.232.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.232.218:80, 42.241.80.96:51942}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51942: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3332--3782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.96" dst_port="51942" src_ip="131.60.232.218" src_port="80"/>
    </slice>
    <from sec="1284008660" usec="0"/>
    <to sec="1284008671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="167.190.222.177"/>
      <from sec="1284008699" usec="0"/>
      <to sec="1284009129" usec="0"/>
    </slice>
    <from sec="1284008699" usec="0"/>
    <to sec="1284009129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
3869[label="198.32.86.148;s;3pkt 3fpkt", shape=diamond, color=yellow];
3870[label="106.6.67.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
11727[label="198.32.86.148;7pkt 7fpkt", shape=pentagon, color=darkviolet];
15115[label="198.32.86.148;7pkt 7fpkt", shape=invtriangle, color=brown];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.86.148:80, 33.73.177.125:*}[57.1429%]&lt;BR/&gt;{198.32.86.148:80, 47.75.176.130:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56240: (11.1111%)&lt;BR/&gt; 53201: (8.33333%)&lt;BR/&gt; 49481: (8.33333%)&lt;BR/&gt; 60047: (5.55556%)&gt;];
}
3869--3870[label="1;1pkt 1fpkt"];
3869--11727[label="1;3pkt 3fpkt"];
3869--15115[label="1;3pkt 3fpkt"];
3870--11727[label="1;1pkt 1fpkt"];
3870--15115[label="1;1pkt 1fpkt"];
11727--15115[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.177.125" src_ip="198.32.86.148" src_port="80"/>
      <filter dst_ip="47.75.176.130" src_ip="198.32.86.148" src_port="80"/>
    </slice>
    <from sec="1284008515" usec="0"/>
    <to sec="1284009240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.105.26.164"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009218" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
4020[label="199.56.60.142;s;88pkt 88fpkt", shape=diamond, color=yellow];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.60.142:0, *:0}[98.8636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.8636%)&lt;BR/&gt; 12200: (0.568182%)&lt;BR/&gt; 8085: (0.568182%)&gt;];
}
4020--7747[label="0.0113636;1pkt 1fpkt"];
4020--8788[label="0.0113636;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.56.60.142"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.52.129.30"/>
      <from sec="1284008403" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
2152[label="144.1.124.105;s;41pkt 41fpkt", shape=diamond, color=yellow];
4121[label="33.73.177.82;d;33pkt 33fpkt", shape=diamond, color=yellow];
8171[label="33.73.177.82;d;20pkt 20fpkt", shape=hexagon, color=black];
10970[label="144.1.124.105;41pkt 41fpkt", shape=pentagon, color=darkviolet];
14674[label="144.1.124.105;41pkt 41fpkt", shape=invtriangle, color=brown];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.1.124.105:80, 33.73.177.82:*}[80.4878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5909%)&lt;BR/&gt; 443: (3.40909%)&lt;BR/&gt; 65365: (1.42045%)&lt;BR/&gt; 65096: (1.42045%)&lt;BR/&gt; 61961: (1.42045%)&gt;];
}
2152--4121[label="1;33pkt 33fpkt"];
2152--8171[label="1;20pkt 20fpkt"];
2152--10970[label="1;41pkt 41fpkt"];
2152--14674[label="1;41pkt 41fpkt"];
4121--8171[label="1;20pkt 20fpkt"];
4121--10970[label="1;33pkt 33fpkt"];
4121--14674[label="1;33pkt 33fpkt"];
8171--10970[label="1;20pkt 20fpkt"];
8171--14674[label="1;20pkt 20fpkt"];
10970--14674[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.177.82" src_ip="144.1.124.105" src_port="80"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
4312[label="33.73.182.26;d;12pkt 12fpkt", shape=diamond, color=yellow];
4313[label="148.52.236.50;s;18pkt 18fpkt", shape=diamond, color=yellow];
8512[label="33.73.182.26;d;9pkt 9fpkt", shape=hexagon, color=black];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.236.50:80, 33.73.182.26:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5897%)&lt;BR/&gt; 0: (12.8205%)&lt;BR/&gt; 63689: (3.84615%)&lt;BR/&gt; 60902: (3.84615%)&lt;BR/&gt; 58986: (3.84615%)&gt;];
}
4312--4313[label="1;12pkt 12fpkt"];
4312--8512[label="1;9pkt 9fpkt"];
4313--8512[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.182.26" src_ip="148.52.236.50" src_port="80"/>
    </slice>
    <from sec="1284008566" usec="0"/>
    <to sec="1284009163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.0.152.60"/>
      <from sec="1284008608" usec="0"/>
      <to sec="1284009022" usec="0"/>
    </slice>
    <from sec="1284008608" usec="0"/>
    <to sec="1284009022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.32.202.168"/>
      <from sec="1284008642" usec="0"/>
      <to sec="1284008927" usec="0"/>
    </slice>
    <from sec="1284008642" usec="0"/>
    <to sec="1284008927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.28.137.30"/>
      <from sec="1284008720" usec="0"/>
      <to sec="1284008760" usec="0"/>
    </slice>
    <from sec="1284008720" usec="0"/>
    <to sec="1284008760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="29.153.221.234"/>
      <from sec="1284008966" usec="0"/>
      <to sec="1284009047" usec="0"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284009047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
4440[label="19.76.1.67;d;59pkt 59fpkt", shape=diamond, color=yellow];
4441[label="198.45.56.218;s;59pkt 59fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.56.218:443, 19.76.1.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 26414: (0.847458%)&lt;BR/&gt; 26413: (0.847458%)&lt;BR/&gt; 26412: (0.847458%)&lt;BR/&gt; 26411: (0.847458%)&gt;];
}
4440--4441[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="19.76.1.67" src_ip="198.45.56.218" src_port="443"/>
    </slice>
    <from sec="1284008737" usec="0"/>
    <to sec="1284008830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.119.153.143"/>
      <from sec="1284008737" usec="0"/>
      <to sec="1284008755" usec="0"/>
    </slice>
    <from sec="1284008737" usec="0"/>
    <to sec="1284008755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
3894[label="42.241.80.180;d;2pkt 2fpkt", shape=diamond, color=yellow];
4480[label="148.36.141.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.141.50:80, 42.241.80.180:39057}[50%]&lt;BR/&gt;{131.60.221.114:80, 42.241.80.180:48503}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39057: (33.3333%)&lt;BR/&gt; 48503: (16.6667%)&gt;];
}
3894--4480[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.180" dst_port="48503" src_ip="131.60.221.114" src_port="80"/>
      <filter dst_ip="42.241.80.180" dst_port="39057" src_ip="148.36.141.50" src_port="80"/>
    </slice>
    <from sec="1284008770" usec="0"/>
    <to sec="1284008792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.175.157.18"/>
      <from sec="1284008790" usec="0"/>
      <to sec="1284009222" usec="0"/>
    </slice>
    <from sec="1284008790" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
4262[label="34.10.102.217;s;8pkt 8fpkt", shape=diamond, color=yellow];
4514[label="167.190.2.117;d;16pkt 16fpkt", shape=diamond, color=yellow];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.10.102.217:80, 167.190.2.117:*}[44.4444%]&lt;BR/&gt;{192.53.230.206:*, 167.190.2.117:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8333%)&lt;BR/&gt; 64638: (4.16667%)&lt;BR/&gt; 64635: (4.16667%)&lt;BR/&gt; 64618: (4.16667%)&lt;BR/&gt; 64617: (4.16667%)&gt;];
}
4262--4514[label="0.75;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.2.117" src_ip="192.53.230.206"/>
      <filter dst_ip="167.190.2.117" src_ip="34.10.102.217" src_port="80"/>
    </slice>
    <from sec="1284008435" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
4523[label="42.241.80.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
4524[label="148.52.15.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
10781[label="148.52.15.96;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.15.96:80, 42.241.80.172:*}[50%]&lt;BR/&gt;{148.52.15.96:80, 33.73.178.228:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49664: (18.75%)&lt;BR/&gt; 49182: (6.25%)&lt;BR/&gt; 47239: (6.25%)&lt;BR/&gt; 40708: (6.25%)&gt;];
}
4523--4524[label="1;1pkt 1fpkt"];
4523--10781[label="1;1pkt 1fpkt"];
4524--10781[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.178.228" src_ip="148.52.15.96" src_port="80"/>
      <filter dst_ip="42.241.80.172" src_ip="148.52.15.96" src_port="80"/>
    </slice>
    <from sec="1284008499" usec="0"/>
    <to sec="1284009275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="23.192.191.70"/>
      <from sec="1284008805" usec="0"/>
      <to sec="1284008887" usec="0"/>
    </slice>
    <from sec="1284008805" usec="0"/>
    <to sec="1284008887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="21.132.65.68"/>
      <from sec="1284008835" usec="0"/>
      <to sec="1284008869" usec="0"/>
    </slice>
    <from sec="1284008835" usec="0"/>
    <to sec="1284008869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
3998[label="145.105.241.1;s;54pkt 54fpkt", shape=diamond, color=yellow];
4614[label="25.223.214.199;d;10pkt 10fpkt", shape=diamond, color=yellow];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.241.1:80, 33.73.176.92:*}[22.2222%]&lt;BR/&gt;{145.105.241.1:80, 32.13.0.229:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1568: (1.5625%)&lt;BR/&gt; 1565: (1.5625%)&lt;BR/&gt; 1563: (1.5625%)&lt;BR/&gt; 1562: (1.5625%)&gt;];
}
3998--4614[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="32.13.0.229" src_ip="145.105.241.1" src_port="80"/>
      <filter dst_ip="33.73.176.92" src_ip="145.105.241.1" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
4649[label="145.105.146.95;d;97pkt 97fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.105.146.95:25}[98.9691%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.4845%)&lt;BR/&gt; 64095: (0.515464%)&lt;BR/&gt; 63509: (0.515464%)&lt;BR/&gt; 63247: (0.515464%)&lt;BR/&gt; 63063: (0.515464%)&gt;];
}
4649--5112[label="0.0103093;1pkt 1fpkt"];
4649--8589[label="0.0103093;1pkt 1fpkt"];
4649--8872[label="0.0103093;1pkt 1fpkt"];
4649--9515[label="0.0103093;1pkt 1fpkt"];
4649--13815[label="0.0103093;1pkt 1fpkt"];
4649--16344[label="0.0103093;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.146.95" dst_port="25"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.36.6.203"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009048" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="137.89.24.22"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="137.5.116.99"/>
      <from sec="1284008404" usec="0"/>
      <to sec="1284009228" usec="0"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
4765[label="167.190.109.212;d;204pkt 204fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 167.190.109.212:5041}[48.0392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (72.7941%)&lt;BR/&gt; 11106: (1.96078%)&lt;BR/&gt; 1029: (0.980392%)&lt;BR/&gt; 80: (0.980392%)&lt;BR/&gt; 5060: (0.490196%)&gt;];
}
4765--10534[label="0.00490196;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.109.212" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.190.225.49"/>
      <from sec="1284008405" usec="0"/>
      <to sec="1284009220" usec="0"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
4823[label="198.45.129.108;s;581pkt 581fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.129.108:3200, *:*}[99.6558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3200: (49.8279%)&lt;BR/&gt; 4041: (0.688468%)&lt;BR/&gt; 51413: (0.516351%)&lt;BR/&gt; 35691: (0.516351%)&lt;BR/&gt; 16881: (0.516351%)&gt;];
}
4823--8902[label="0.00344234;2pkt 2fpkt"];
4823--8909[label="0.00172117;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="198.45.129.108" src_port="3200"/>
    </slice>
    <from sec="1284008410" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
3655[label="131.60.237.1;s;13pkt 13fpkt", shape=diamond, color=yellow];
4859[label="218.211.21.102;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.237.1:80, 218.211.21.102:*}[53.8462%]&lt;BR/&gt;{131.60.237.1:80, 33.73.176.77:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1899: (5.55556%)&lt;BR/&gt; 1871: (5.55556%)&lt;BR/&gt; 1850: (5.55556%)&lt;BR/&gt; 1843: (5.55556%)&gt;];
}
3655--4859[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="218.211.21.102" src_ip="131.60.237.1" src_port="80"/>
      <filter dst_ip="33.73.176.77" src_ip="131.60.237.1" src_port="80"/>
    </slice>
    <from sec="1284008424" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="167.190.225.57"/>
      <from sec="1284009070" usec="0"/>
      <to sec="1284009165" usec="0"/>
    </slice>
    <from sec="1284009070" usec="0"/>
    <to sec="1284009165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="22.200.21.177"/>
      <from sec="1284008691" usec="0"/>
      <to sec="1284009000" usec="0"/>
    </slice>
    <from sec="1284008691" usec="0"/>
    <to sec="1284009000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="122.13.40.183"/>
      <from sec="1284008697" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284008697" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="65.81.47.205"/>
      <from sec="1284008733" usec="0"/>
      <to sec="1284009187" usec="0"/>
    </slice>
    <from sec="1284008733" usec="0"/>
    <to sec="1284009187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.132.65.68"/>
      <from sec="1284008835" usec="0"/>
      <to sec="1284008937" usec="0"/>
    </slice>
    <from sec="1284008835" usec="0"/>
    <to sec="1284008937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.48.168.70"/>
      <from sec="1284008839" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284008839" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.66.125.115"/>
      <from sec="1284008855" usec="0"/>
      <to sec="1284008988" usec="0"/>
    </slice>
    <from sec="1284008855" usec="0"/>
    <to sec="1284008988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.167.125.254"/>
      <from sec="1284008860" usec="0"/>
      <to sec="1284008938" usec="0"/>
    </slice>
    <from sec="1284008860" usec="0"/>
    <to sec="1284008938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.194.5.240"/>
      <from sec="1284008891" usec="0"/>
      <to sec="1284008934" usec="0"/>
    </slice>
    <from sec="1284008891" usec="0"/>
    <to sec="1284008934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="33.73.178.141"/>
      <from sec="1284008906" usec="0"/>
      <to sec="1284008919" usec="0"/>
    </slice>
    <from sec="1284008906" usec="0"/>
    <to sec="1284008919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="33.73.178.141"/>
      <from sec="1284008906" usec="0"/>
      <to sec="1284008962" usec="0"/>
    </slice>
    <from sec="1284008906" usec="0"/>
    <to sec="1284008962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="28.13.62.64"/>
      <from sec="1284008921" usec="0"/>
      <to sec="1284008997" usec="0"/>
    </slice>
    <from sec="1284008921" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="137.5.68.236"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009225" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.105.180.200"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009222" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="144.1.126.83"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284009048" usec="0"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
4157[label="137.5.168.55;s;230pkt 230fpkt", shape=diamond, color=yellow];
5326[label="68.68.74.40;d;71pkt 71fpkt", shape=diamond, color=yellow];
10009[label="137.5.168.55;241pkt 241fpkt", shape=pentagon, color=darkviolet];
14107[label="137.5.168.55;241pkt 241fpkt", shape=invtriangle, color=brown];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.5.168.55:28497, 68.68.74.40:*}[31.1203%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28497: (50%)&lt;BR/&gt; 5031: (0.446999%)&lt;BR/&gt; 63212: (0.255428%)&lt;BR/&gt; 63061: (0.255428%)&lt;BR/&gt; 61094: (0.255428%)&gt;];
}
4157--5326[label="1;71pkt 71fpkt"];
4157--8894[label="0.00434783;1pkt 1fpkt"];
4157--8902[label="0.00434783;1pkt 1fpkt"];
4157--8909[label="0.00434783;1pkt 1fpkt"];
4157--10009[label="1;230pkt 230fpkt"];
4157--14107[label="1;230pkt 230fpkt"];
5326--10009[label="1;71pkt 71fpkt"];
5326--14107[label="1;71pkt 71fpkt"];
10009--14107[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_ip="68.68.74.40" src_ip="137.5.168.55" src_port="28497"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.34.145.32"/>
      <from sec="1284008668" usec="0"/>
      <to sec="1284009096" usec="0"/>
    </slice>
    <from sec="1284008668" usec="0"/>
    <to sec="1284009096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.196.79.215"/>
      <from sec="1284008695" usec="0"/>
      <to sec="1284009138" usec="0"/>
    </slice>
    <from sec="1284008695" usec="0"/>
    <to sec="1284009138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="2.196.79.215"/>
      <from sec="1284008695" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284008695" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="65.81.47.205"/>
      <from sec="1284008733" usec="0"/>
      <to sec="1284009045" usec="0"/>
    </slice>
    <from sec="1284008733" usec="0"/>
    <to sec="1284009045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.175.16.88"/>
      <from sec="1284008782" usec="0"/>
      <to sec="1284009049" usec="0"/>
    </slice>
    <from sec="1284008782" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.96.26.5"/>
      <from sec="1284008820" usec="0"/>
      <to sec="1284009227" usec="0"/>
    </slice>
    <from sec="1284008820" usec="0"/>
    <to sec="1284009227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="65.161.194.187"/>
      <from sec="1284008850" usec="0"/>
      <to sec="1284009024" usec="0"/>
    </slice>
    <from sec="1284008850" usec="0"/>
    <to sec="1284009024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="183.84.38.239"/>
      <from sec="1284008873" usec="0"/>
      <to sec="1284009137" usec="0"/>
    </slice>
    <from sec="1284008873" usec="0"/>
    <to sec="1284009137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
2803[label="145.105.211.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
5582[label="42.241.80.31;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.211.139:80, 42.241.80.31:47560}[50%]&lt;BR/&gt;{148.52.131.155:80, 42.241.80.31:55436}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47560: (33.3333%)&lt;BR/&gt; 55436: (16.6667%)&gt;];
}
2803--5582[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.31" dst_port="55436" src_ip="148.52.131.155" src_port="80"/>
      <filter dst_ip="42.241.80.31" dst_port="47560" src_ip="145.105.211.139" src_port="80"/>
    </slice>
    <from sec="1284009161" usec="0"/>
    <to sec="1284009197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.92.212.132"/>
      <from sec="1284008914" usec="0"/>
      <to sec="1284009096" usec="0"/>
    </slice>
    <from sec="1284008914" usec="0"/>
    <to sec="1284009096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.92.213.1"/>
      <from sec="1284008965" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284008965" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.153.221.234"/>
      <from sec="1284008966" usec="0"/>
      <to sec="1284009047" usec="0"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284009047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
5462[label="148.52.226.53;s;7pkt 7fpkt", shape=diamond, color=yellow];
5686[label="33.73.176.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.226.53:443, 33.73.176.112:*}[71.4286%]&lt;BR/&gt;{148.52.226.53:80, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (31.25%)&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 63081: (12.5%)&lt;BR/&gt; 63152: (6.25%)&lt;BR/&gt; 63149: (6.25%)&gt;];
}
5462--5686[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.52.226.53" src_port="80"/>
      <filter dst_ip="33.73.176.112" src_ip="148.52.226.53" src_port="443"/>
    </slice>
    <from sec="1284008498" usec="0"/>
    <to sec="1284008978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.873817,2.45832,011,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
1872[label="199.56.44.150;s;869pkt 869fpkt", shape=diamond, color=yellow];
5703[label="9.64.97.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
11766[label="199.56.44.150;945pkt 945fpkt", shape=pentagon, color=darkviolet];
17160[label="199.56.44.150;938pkt 938fpkt", shape=invhouse, color=bisque];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.44.150:5200, *:*}[21.0582%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5200: (10.5483%)&lt;BR/&gt; 7743: (0.925926%)&lt;BR/&gt; 11560: (0.635439%)&lt;BR/&gt; 20000: (0.272331%)&lt;BR/&gt; 9321: (0.217865%)&gt;];
}
1872--3825[label="0.00694444;1pkt 1fpkt"];
1872--5703[label="1;2pkt 2fpkt"];
1872--8014[label="0.00694444;1pkt 1fpkt"];
1872--8900[label="0.00115075;1pkt 1fpkt"];
1872--11766[label="1;869pkt 869fpkt"];
1872--17160[label="0.991945;862pkt 862fpkt"];
5703--11766[label="1;2pkt 2fpkt"];
5703--17160[label="1;2pkt 2fpkt"];
11766--17160[label="1;938pkt 938fpkt"];
</description>
    <slice>
      <filter src_ip="199.56.44.150" src_port="5200"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.32.206.174"/>
      <from sec="1284008981" usec="0"/>
      <to sec="1284009130" usec="0"/>
    </slice>
    <from sec="1284008981" usec="0"/>
    <to sec="1284009130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
5589[label="145.105.25.98;s;4pkt 4fpkt", shape=diamond, color=yellow];
5718[label="28.108.35.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.25.98:28950, 3.91.205.235:80}[25%]&lt;BR/&gt;{145.105.25.98:80, 28.108.35.245:14041}[25%]&lt;BR/&gt;{145.105.25.98:80, 28.108.35.241:5326}[25%]&lt;BR/&gt;{145.105.25.98:80, 28.108.35.241:6976}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14041: (20%)&lt;BR/&gt; 28950: (10%)&lt;BR/&gt; 6976: (10%)&lt;BR/&gt; 5326: (10%)&gt;];
}
5589--5718[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="28.108.35.241" dst_port="6976" src_ip="145.105.25.98" src_port="80"/>
      <filter dst_ip="28.108.35.241" dst_port="5326" src_ip="145.105.25.98" src_port="80"/>
      <filter dst_ip="28.108.35.245" dst_port="14041" src_ip="145.105.25.98" src_port="80"/>
      <filter dst_ip="3.91.205.235" dst_port="80" src_ip="145.105.25.98" src_port="28950"/>
    </slice>
    <from sec="1284008909" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.108.173.120"/>
      <from sec="1284008995" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="96.51.16.188"/>
      <from sec="1284009021" usec="0"/>
      <to sec="1284009039" usec="0"/>
    </slice>
    <from sec="1284009021" usec="0"/>
    <to sec="1284009039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
5245[label="164.12.184.153;d;27pkt 27fpkt", shape=diamond, color=yellow];
5835[label="29.239.129.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
9285[label="29.239.129.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13678[label="29.239.129.17;1pkt 1fpkt", shape=invtriangle, color=brown];
16260[label="29.239.129.17;1pkt 1fpkt", shape=invhouse, color=bisque];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.12.184.153:8178}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8178: (48.3871%)&lt;BR/&gt; 62836: (8.06452%)&lt;BR/&gt; 0: (3.22581%)&lt;BR/&gt; 63623: (1.6129%)&lt;BR/&gt; 62221: (1.6129%)&gt;];
}
5245--5835[label="1;1pkt 1fpkt"];
5245--9285[label="1;1pkt 1fpkt"];
5245--13678[label="1;1pkt 1fpkt"];
5245--16260[label="1;1pkt 1fpkt"];
5835--9285[label="1;1pkt 1fpkt"];
5835--13678[label="1;1pkt 1fpkt"];
5835--16260[label="1;1pkt 1fpkt"];
9285--13678[label="1;1pkt 1fpkt"];
9285--16260[label="1;1pkt 1fpkt"];
13678--16260[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.12.184.153" dst_port="8178"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.52.129.24"/>
      <from sec="1284008406" usec="0"/>
      <to sec="1284009222" usec="0"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.52.240.25"/>
      <from sec="1284008411" usec="0"/>
      <to sec="1284009126" usec="0"/>
    </slice>
    <from sec="1284008411" usec="0"/>
    <to sec="1284009126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="3.180.182.67"/>
      <from sec="1284008689" usec="0"/>
      <to sec="1284009213" usec="0"/>
    </slice>
    <from sec="1284008689" usec="0"/>
    <to sec="1284009213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="122.13.40.183"/>
      <from sec="1284008697" usec="0"/>
      <to sec="1284009181" usec="0"/>
    </slice>
    <from sec="1284008697" usec="0"/>
    <to sec="1284009181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="21.66.125.115"/>
      <from sec="1284008855" usec="0"/>
      <to sec="1284009138" usec="0"/>
    </slice>
    <from sec="1284008855" usec="0"/>
    <to sec="1284009138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="183.82.110.199"/>
      <from sec="1284008866" usec="0"/>
      <to sec="1284009228" usec="0"/>
    </slice>
    <from sec="1284008866" usec="0"/>
    <to sec="1284009228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
5089[label="148.175.208.131;d;4pkt 4fpkt", shape=diamond, color=yellow];
6003[label="194.240.165.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.240.165.7:80, 148.175.208.131:4291}[25%]&lt;BR/&gt;{33.51.0.183:80, 148.175.208.131:4287}[25%]&lt;BR/&gt;{56.139.155.190:80, 148.175.208.131:4269}[25%]&lt;BR/&gt;{34.11.217.213:80, 148.175.208.131:4273}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4291: (20%)&lt;BR/&gt; 4287: (10%)&lt;BR/&gt; 4273: (10%)&lt;BR/&gt; 4269: (10%)&gt;];
}
5089--6003[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.175.208.131" dst_port="4273" src_ip="34.11.217.213" src_port="80"/>
      <filter dst_ip="148.175.208.131" dst_port="4269" src_ip="56.139.155.190" src_port="80"/>
      <filter dst_ip="148.175.208.131" dst_port="4287" src_ip="33.51.0.183" src_port="80"/>
      <filter dst_ip="148.175.208.131" dst_port="4291" src_ip="194.240.165.7" src_port="80"/>
    </slice>
    <from sec="1284008902" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="8.134.166.106"/>
      <from sec="1284008927" usec="0"/>
      <to sec="1284009159" usec="0"/>
    </slice>
    <from sec="1284008927" usec="0"/>
    <to sec="1284009159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="69.140.178.100"/>
      <from sec="1284008965" usec="0"/>
      <to sec="1284009047" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.1.144.193"/>
      <from sec="1284008969" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284008969" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.179.67.177"/>
      <from sec="1284008992" usec="0"/>
      <to sec="1284009213" usec="0"/>
    </slice>
    <from sec="1284008992" usec="0"/>
    <to sec="1284009213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="17.103.247.78"/>
      <from sec="1284008999" usec="0"/>
      <to sec="1284009147" usec="0"/>
    </slice>
    <from sec="1284008999" usec="0"/>
    <to sec="1284009147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.28.176.161"/>
      <from sec="1284009025" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.9.89.191"/>
      <from sec="1284009026" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284009026" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
5655[label="148.175.218.58;d;82pkt 82fpkt", shape=diamond, color=yellow];
6054[label="210.181.16.170;s;76pkt 76fpkt", shape=diamond, color=yellow];
8596[label="148.175.218.58;d;79pkt 79fpkt", shape=hexagon, color=black];
12153[label="210.181.16.170;76pkt 76fpkt", shape=pentagon, color=darkviolet];
15373[label="210.181.16.170;76pkt 76fpkt", shape=invtriangle, color=brown];
17295[label="210.181.16.170;76pkt 76fpkt", shape=invhouse, color=bisque];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.181.16.170:80, 148.175.218.58:*}[92.6829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56139: (0.645161%)&lt;BR/&gt; 56137: (0.645161%)&lt;BR/&gt; 56135: (0.645161%)&lt;BR/&gt; 56133: (0.645161%)&gt;];
}
5655--6054[label="1;76pkt 76fpkt"];
5655--8596[label="1;79pkt 79fpkt"];
5655--12153[label="1;76pkt 76fpkt"];
5655--15373[label="1;76pkt 76fpkt"];
5655--17295[label="1;76pkt 76fpkt"];
6054--8596[label="1;76pkt 76fpkt"];
6054--12153[label="1;76pkt 76fpkt"];
6054--15373[label="1;76pkt 76fpkt"];
6054--17295[label="1;76pkt 76fpkt"];
8596--12153[label="1;76pkt 76fpkt"];
8596--15373[label="1;76pkt 76fpkt"];
8596--17295[label="1;76pkt 76fpkt"];
12153--15373[label="1;76pkt 76fpkt"];
12153--17295[label="1;76pkt 76fpkt"];
15373--17295[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="148.175.218.58" src_ip="210.181.16.170" src_port="80"/>
    </slice>
    <from sec="1284008962" usec="0"/>
    <to sec="1284009223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="96.51.16.176"/>
      <from sec="1284009042" usec="0"/>
      <to sec="1284009061" usec="0"/>
    </slice>
    <from sec="1284009042" usec="0"/>
    <to sec="1284009061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="21.35.149.92"/>
      <from sec="1284009061" usec="0"/>
      <to sec="1284009139" usec="0"/>
    </slice>
    <from sec="1284009061" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.21.11.175"/>
      <from sec="1284009083" usec="0"/>
      <to sec="1284009121" usec="0"/>
    </slice>
    <from sec="1284009083" usec="0"/>
    <to sec="1284009121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="28.37.214.75"/>
      <from sec="1284009092" usec="0"/>
      <to sec="1284009136" usec="0"/>
    </slice>
    <from sec="1284009092" usec="0"/>
    <to sec="1284009136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
6099[label="145.105.53.19;d;9pkt 9fpkt", shape=diamond, color=yellow];
6125[label="24.70.104.88;s;8pkt 8fpkt", shape=diamond, color=yellow];
10650[label="24.70.104.88;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14479[label="24.70.104.88;8pkt 8fpkt", shape=invtriangle, color=brown];
16777[label="24.70.104.88;8pkt 8fpkt", shape=invhouse, color=bisque];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.70.104.88:80, 145.105.53.19:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1890: (6.09756%)&lt;BR/&gt; 1582: (6.09756%)&lt;BR/&gt; 1580: (6.09756%)&lt;BR/&gt; 1578: (6.09756%)&gt;];
}
6099--6125[label="1;8pkt 8fpkt"];
6099--10650[label="1;8pkt 8fpkt"];
6099--14479[label="1;8pkt 8fpkt"];
6099--16777[label="1;8pkt 8fpkt"];
6125--10650[label="1;8pkt 8fpkt"];
6125--14479[label="1;8pkt 8fpkt"];
6125--16777[label="1;8pkt 8fpkt"];
10650--14479[label="1;8pkt 8fpkt"];
10650--16777[label="1;8pkt 8fpkt"];
14479--16777[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.53.19" src_ip="24.70.104.88" src_port="80"/>
    </slice>
    <from sec="1284009069" usec="0"/>
    <to sec="1284009221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
6029[label="131.60.55.74;s;4pkt 4fpkt", shape=diamond, color=yellow];
6131[label="33.73.177.203;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.55.74:25, 210.224.160.9:3032}[25%]&lt;BR/&gt;{131.60.55.74:25, 20.132.216.141:20132}[25%]&lt;BR/&gt;{131.60.55.74:80, 33.73.177.203:48322}[25%]&lt;BR/&gt;{131.60.55.74:80, 33.73.177.203:62163}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 62163: (16.6667%)&lt;BR/&gt; 48322: (16.6667%)&lt;BR/&gt; 25: (16.6667%)&lt;BR/&gt; 20132: (8.33333%)&gt;];
}
6029--6131[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.177.203" dst_port="62163" src_ip="131.60.55.74" src_port="80"/>
      <filter dst_ip="33.73.177.203" dst_port="48322" src_ip="131.60.55.74" src_port="80"/>
      <filter dst_ip="20.132.216.141" dst_port="20132" src_ip="131.60.55.74" src_port="25"/>
      <filter dst_ip="210.224.160.9" dst_port="3032" src_ip="131.60.55.74" src_port="25"/>
    </slice>
    <from sec="1284008986" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
3938[label="167.190.47.52;d;2pkt 2fpkt", shape=diamond, color=yellow];
6157[label="40.254.6.55;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.254.6.55:443, 167.190.47.52:63101}[50%]&lt;BR/&gt;{40.254.6.55:443, 167.190.47.52:63108}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 63108: (25%)&lt;BR/&gt; 63101: (25%)&gt;];
}
3938--6157[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.47.52" dst_port="63108" src_ip="40.254.6.55" src_port="443"/>
      <filter dst_ip="167.190.47.52" dst_port="63101" src_ip="40.254.6.55" src_port="443"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
6170[label="223.155.221.105;s;496pkt 496fpkt", shape=diamond, color=yellow];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.155.221.105:80, *:3072}[52.0161%]&lt;BR/&gt;{223.155.221.105:80, *:1024}[47.9839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3072: (26.0081%)&lt;BR/&gt; 1024: (23.9919%)&gt;];
}
</description>
    <slice>
      <filter dst_port="3072" src_ip="223.155.221.105" src_port="80"/>
      <filter dst_port="1024" src_ip="223.155.221.105" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="65.69.38.142"/>
      <from sec="1284008402" usec="0"/>
      <to sec="1284009227" usec="0"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.105.139.109"/>
      <from sec="1284008413" usec="0"/>
      <to sec="1284009225" usec="0"/>
    </slice>
    <from sec="1284008413" usec="0"/>
    <to sec="1284009225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.52.169.162"/>
      <from sec="1284008421" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284008421" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="170.139.21.161"/>
      <from sec="1284008473" usec="0"/>
      <to sec="1284009226" usec="0"/>
    </slice>
    <from sec="1284008473" usec="0"/>
    <to sec="1284009226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="16.218.150.19"/>
      <from sec="1284009014" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009014" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="16.218.150.19"/>
      <from sec="1284009014" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009014" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.41.74.103"/>
      <from sec="1284009067" usec="0"/>
      <to sec="1284009141" usec="0"/>
    </slice>
    <from sec="1284009067" usec="0"/>
    <to sec="1284009141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.33.236.47"/>
      <from sec="1284009099" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009099" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
5843[label="148.36.194.208;s;160pkt 160fpkt", shape=diamond, color=yellow];
6467[label="96.89.128.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.194.208:23633, *:*}[91.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23633: (45.6522%)&lt;BR/&gt; 80: (1.24224%)&lt;BR/&gt; 26910: (0.931677%)&lt;BR/&gt; 12340: (0.621118%)&lt;BR/&gt; 6667: (0.621118%)&gt;];
}
5843--6467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.36.194.208" src_port="23633"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="16.216.233.120"/>
      <from sec="1284009113" usec="0"/>
      <to sec="1284009227" usec="0"/>
    </slice>
    <from sec="1284009113" usec="0"/>
    <to sec="1284009227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.83.101.117"/>
      <from sec="1284009123" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009123" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.93.174.69"/>
      <from sec="1284009129" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009129" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.170.242.102"/>
      <from sec="1284009129" usec="0"/>
      <to sec="1284009155" usec="0"/>
    </slice>
    <from sec="1284009129" usec="0"/>
    <to sec="1284009155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.83.101.73"/>
      <from sec="1284009132" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009132" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="16.110.49.10"/>
      <from sec="1284009151" usec="0"/>
      <to sec="1284009183" usec="0"/>
    </slice>
    <from sec="1284009151" usec="0"/>
    <to sec="1284009183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.198.196.25"/>
      <from sec="1284009169" usec="0"/>
      <to sec="1284009180" usec="0"/>
    </slice>
    <from sec="1284009169" usec="0"/>
    <to sec="1284009180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.26.32.80"/>
      <from sec="1284009170" usec="0"/>
      <to sec="1284009188" usec="0"/>
    </slice>
    <from sec="1284009170" usec="0"/>
    <to sec="1284009188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.208.156.24"/>
      <from sec="1284009171" usec="0"/>
      <to sec="1284009206" usec="0"/>
    </slice>
    <from sec="1284009171" usec="0"/>
    <to sec="1284009206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="25.106.108.39"/>
      <from sec="1284009184" usec="0"/>
      <to sec="1284009228" usec="0"/>
    </slice>
    <from sec="1284009184" usec="0"/>
    <to sec="1284009228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.17.202.44"/>
      <from sec="1284009188" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009188" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="28.70.216.207"/>
      <from sec="1284009191" usec="0"/>
      <to sec="1284009214" usec="0"/>
    </slice>
    <from sec="1284009191" usec="0"/>
    <to sec="1284009214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
6202[label="145.105.21.199;d;373pkt 373fpkt", shape=diamond, color=yellow];
6541[label="208.61.8.0;s;371pkt 371fpkt", shape=diamond, color=yellow];
8921[label="208.61.8.0;370pkt 370fpkt", shape=pentagon, color=darkviolet];
13491[label="208.61.8.0;370pkt 370fpkt", shape=invtriangle, color=brown];
16139[label="208.61.8.0;370pkt 370fpkt", shape=invhouse, color=bisque];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.61.8.0:*, 145.105.21.199:*}[99.4638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19991: (0.674218%)&lt;BR/&gt; 11055: (0.674218%)&lt;BR/&gt; 9988: (0.674218%)&lt;BR/&gt; 9090: (0.674218%)&lt;BR/&gt; 8888: (0.674218%)&gt;];
}
6202--6541[label="1;371pkt 371fpkt"];
6202--8589[label="0.00268097;1pkt 1fpkt"];
6202--8872[label="0.00268097;1pkt 1fpkt"];
6202--8921[label="1;370pkt 370fpkt"];
6202--9515[label="0.00268097;1pkt 1fpkt"];
6202--13491[label="1;370pkt 370fpkt"];
6202--13815[label="0.00268097;1pkt 1fpkt"];
6202--16139[label="1;370pkt 370fpkt"];
6202--16344[label="0.00268097;1pkt 1fpkt"];
6541--8921[label="1;370pkt 370fpkt"];
6541--13491[label="1;370pkt 370fpkt"];
6541--16139[label="1;370pkt 370fpkt"];
8921--13491[label="1;370pkt 370fpkt"];
8921--16139[label="1;370pkt 370fpkt"];
13491--16139[label="1;370pkt 370fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.21.199" src_ip="208.61.8.0"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="64.168.106.27"/>
      <from sec="1284009201" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009201" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.29.246.155"/>
      <from sec="1284009207" usec="0"/>
      <to sec="1284009228" usec="0"/>
    </slice>
    <from sec="1284009207" usec="0"/>
    <to sec="1284009228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733601,2.51949,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.121.167.45"/>
      <from sec="1284009216" usec="0"/>
      <to sec="1284009229" usec="0"/>
    </slice>
    <from sec="1284009216" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
245[label="145.105.180.123;d;81pkt 81fpkt", shape=diamond, color=yellow];
1931[label="221.126.100.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
2796[label="18.11.189.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
3115[label="183.90.174.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
3704[label="18.13.10.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
3949[label="183.84.171.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
4127[label="19.109.72.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
4505[label="122.134.3.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
4916[label="19.103.11.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
5195[label="168.190.49.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
5489[label="18.171.60.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
6583[label="145.105.180.123;d;40pkt 40fpkt", shape=hexagon, color=black];
9744[label="183.84.171.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9967[label="221.126.100.53;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10075[label="19.184.179.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11094[label="19.109.72.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11186[label="9.85.91.117;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12383[label="19.157.192.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12832[label="21.147.56.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12931[label="26.45.153.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13951[label="183.84.171.41;1pkt 1fpkt", shape=invtriangle, color=brown];
14083[label="221.126.100.53;1pkt 1fpkt", shape=invtriangle, color=brown];
14142[label="19.184.179.58;1pkt 1fpkt", shape=invtriangle, color=brown];
14749[label="19.109.72.112;1pkt 1fpkt", shape=invtriangle, color=brown];
14798[label="9.85.91.117;1pkt 1fpkt", shape=invtriangle, color=brown];
15817[label="26.45.153.216;1pkt 1fpkt", shape=invtriangle, color=brown];
16431[label="183.84.171.41;1pkt 1fpkt", shape=invhouse, color=bisque];
16519[label="221.126.100.53;1pkt 1fpkt", shape=invhouse, color=bisque];
16556[label="19.184.179.58;1pkt 1fpkt", shape=invhouse, color=bisque];
16936[label="19.109.72.112;1pkt 1fpkt", shape=invhouse, color=bisque];
17539[label="26.45.153.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.105.180.123:15000}[46.9136%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (31.3333%)&lt;BR/&gt; 5041: (8.33333%)&lt;BR/&gt; 80: (4%)&lt;BR/&gt; 8000: (3.33333%)&lt;BR/&gt; 6667: (2.66667%)&gt;];
}
245--1931[label="1;1pkt 1fpkt"];
245--2796[label="1;1pkt 1fpkt"];
245--3115[label="1;1pkt 1fpkt"];
245--3704[label="1;1pkt 1fpkt"];
245--3949[label="1;1pkt 1fpkt"];
245--4127[label="1;1pkt 1fpkt"];
245--4505[label="1;1pkt 1fpkt"];
245--4916[label="1;1pkt 1fpkt"];
245--5195[label="1;1pkt 1fpkt"];
245--5489[label="1;1pkt 1fpkt"];
245--6583[label="1;40pkt 40fpkt"];
245--9744[label="1;1pkt 1fpkt"];
245--9967[label="1;1pkt 1fpkt"];
245--10075[label="1;1pkt 1fpkt"];
245--11094[label="1;1pkt 1fpkt"];
245--11186[label="1;1pkt 1fpkt"];
245--12383[label="1;1pkt 1fpkt"];
245--12832[label="1;1pkt 1fpkt"];
245--12931[label="1;1pkt 1fpkt"];
245--13951[label="1;1pkt 1fpkt"];
245--14083[label="1;1pkt 1fpkt"];
245--14142[label="1;1pkt 1fpkt"];
245--14749[label="1;1pkt 1fpkt"];
245--14798[label="1;1pkt 1fpkt"];
245--15817[label="1;1pkt 1fpkt"];
245--16431[label="1;1pkt 1fpkt"];
245--16519[label="1;1pkt 1fpkt"];
245--16556[label="1;1pkt 1fpkt"];
245--16936[label="1;1pkt 1fpkt"];
245--17539[label="1;1pkt 1fpkt"];
1931--6583[label="1;1pkt 1fpkt"];
1931--9967[label="1;1pkt 1fpkt"];
1931--14083[label="1;1pkt 1fpkt"];
1931--16519[label="1;1pkt 1fpkt"];
2796--6583[label="1;1pkt 1fpkt"];
3115--6583[label="1;1pkt 1fpkt"];
3949--6583[label="1;1pkt 1fpkt"];
3949--9744[label="1;1pkt 1fpkt"];
3949--13951[label="1;1pkt 1fpkt"];
3949--16431[label="1;1pkt 1fpkt"];
4127--6583[label="1;1pkt 1fpkt"];
4127--11094[label="1;1pkt 1fpkt"];
4127--14749[label="1;1pkt 1fpkt"];
4127--16936[label="1;1pkt 1fpkt"];
5195--6583[label="1;1pkt 1fpkt"];
6583--9744[label="1;1pkt 1fpkt"];
6583--9967[label="1;1pkt 1fpkt"];
6583--11094[label="1;1pkt 1fpkt"];
6583--12383[label="1;1pkt 1fpkt"];
6583--13951[label="1;1pkt 1fpkt"];
6583--14083[label="1;1pkt 1fpkt"];
6583--14749[label="1;1pkt 1fpkt"];
6583--16431[label="1;1pkt 1fpkt"];
6583--16519[label="1;1pkt 1fpkt"];
6583--16936[label="1;1pkt 1fpkt"];
9744--13951[label="1;1pkt 1fpkt"];
9744--16431[label="1;1pkt 1fpkt"];
9967--14083[label="1;1pkt 1fpkt"];
9967--16519[label="1;1pkt 1fpkt"];
10075--14142[label="1;1pkt 1fpkt"];
10075--16556[label="1;1pkt 1fpkt"];
11094--14749[label="1;1pkt 1fpkt"];
11094--16936[label="1;1pkt 1fpkt"];
11186--14798[label="1;1pkt 1fpkt"];
12931--15817[label="1;1pkt 1fpkt"];
12931--17539[label="1;1pkt 1fpkt"];
13951--16431[label="1;1pkt 1fpkt"];
14083--16519[label="1;1pkt 1fpkt"];
14142--16556[label="1;1pkt 1fpkt"];
14749--16936[label="1;1pkt 1fpkt"];
15817--17539[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.180.123" dst_port="15000"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1284008401" usec="0"/>
      <to sec="1284008599" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
465[label="148.36.85.225;d;88pkt 88fpkt", shape=diamond, color=yellow];
6629[label="148.36.85.225;d;86pkt 86fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.36.85.225:8090}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8090: (48.2759%)&lt;BR/&gt; 80: (1.43678%)&lt;BR/&gt; 63409: (0.574713%)&lt;BR/&gt; 60782: (0.574713%)&lt;BR/&gt; 58906: (0.574713%)&gt;];
}
465--5112[label="0.0113636;1pkt 1fpkt"];
465--6629[label="1;86pkt 86fpkt"];
465--8589[label="0.0113636;1pkt 1fpkt"];
465--8872[label="0.0113636;1pkt 1fpkt"];
465--9515[label="0.0113636;1pkt 1fpkt"];
465--13815[label="0.0113636;1pkt 1fpkt"];
465--16344[label="0.0113636;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.85.225" dst_port="8090"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
339[label="145.105.115.228;d;163pkt 163fpkt", shape=diamond, color=yellow];
588[label="20.178.52.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
1692[label="210.34.165.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
4352[label="68.177.225.35;s;8pkt 8fpkt", shape=diamond, color=yellow];
5622[label="217.199.76.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
6657[label="20.178.52.228;s;1pkt 1fpkt", shape=hexagon, color=black];
11963[label="35.163.82.161;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13112[label="20.178.52.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.105.115.228:5154}[33.5366%]&lt;BR/&gt;{*:*, 145.105.115.228:46900}[33.5366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5154: (19.1011%)&lt;BR/&gt; 46900: (15.4494%)&lt;BR/&gt; 443: (6.74157%)&lt;BR/&gt; 80: (3.08989%)&lt;BR/&gt; 0: (1.68539%)&gt;];
}
339--389[label="0.00826446;1pkt 1fpkt"];
339--492[label="0.0490798;8pkt 8fpkt"];
339--588[label="1;1pkt 1fpkt"];
339--1267[label="0.0422535;3pkt 3fpkt"];
339--1692[label="1;1pkt 1fpkt"];
339--2870[label="0.0184049;3pkt 3fpkt"];
339--2937[label="0.030303;2pkt 2fpkt"];
339--2970[label="0.0267857;3pkt 3fpkt"];
339--4352[label="1;8pkt 8fpkt"];
339--5112[label="0.00613497;1pkt 1fpkt"];
339--5622[label="1;1pkt 1fpkt"];
339--6198[label="0.0184049;3pkt 3fpkt"];
339--6657[label="1;1pkt 1fpkt"];
339--8310[label="0.044586;7pkt 7fpkt"];
339--8589[label="0.00613497;1pkt 1fpkt"];
339--8872[label="0.00613497;1pkt 1fpkt"];
339--9515[label="0.00613497;1pkt 1fpkt"];
339--11836[label="0.0490798;8pkt 8fpkt"];
339--11963[label="0.5;1pkt 1fpkt"];
339--13112[label="1;1pkt 1fpkt"];
339--13815[label="0.00613497;1pkt 1fpkt"];
339--15185[label="0.0490798;8pkt 8fpkt"];
339--16344[label="0.00613497;1pkt 1fpkt"];
588--6657[label="1;1pkt 1fpkt"];
588--13112[label="1;1pkt 1fpkt"];
6657--13112[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.115.228" dst_port="46900"/>
      <filter dst_ip="145.105.115.228" dst_port="5154"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1053[label="167.190.108.147;d;39pkt 39fpkt", shape=diamond, color=yellow];
1054[label="22.1.33.202;s;44pkt 44fpkt", shape=diamond, color=yellow];
6748[label="167.190.108.147;d;38pkt 38fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.1.33.202:80, 167.190.108.147:*}[80.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49384: (1.23967%)&lt;BR/&gt; 49383: (1.23967%)&lt;BR/&gt; 49382: (1.23967%)&lt;BR/&gt; 49380: (1.23967%)&gt;];
}
1053--1054[label="0.948718;37pkt 37fpkt"];
1053--6748[label="1;38pkt 38fpkt"];
1054--6748[label="0.973684;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.147" src_ip="22.1.33.202" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
285[label="40.26.225.35;d;1pkt 1fpkt", shape=diamond, color=yellow];
1213[label="122.133.211.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
1672[label="167.190.108.137;s;91pkt 91fpkt", shape=diamond, color=yellow];
1807[label="2.146.227.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
2240[label="40.208.155.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
2453[label="183.103.96.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
3690[label="120.0.26.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
3961[label="21.35.176.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
4602[label="122.139.78.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
4618[label="122.133.156.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
5469[label="19.110.158.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
6089[label="21.35.149.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
6151[label="21.35.36.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
6446[label="21.35.71.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
6475[label="16.216.233.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
6594[label="40.26.225.35;d;1pkt 1fpkt", shape=hexagon, color=black];
6943[label="2.146.227.217;d;1pkt 1fpkt", shape=hexagon, color=black];
8398[label="122.133.211.62;d;1pkt 1fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.108.137:3151, *:17788}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3151: (47.6852%)&lt;BR/&gt; 17788: (16.2037%)&lt;BR/&gt; 8800: (3.7037%)&lt;BR/&gt; 58310: (1.38889%)&lt;BR/&gt; 40662: (1.38889%)&gt;];
}
285--1672[label="1;1pkt 1fpkt"];
285--6594[label="1;1pkt 1fpkt"];
1213--1672[label="1;1pkt 1fpkt"];
1213--8398[label="1;1pkt 1fpkt"];
1672--1807[label="1;1pkt 1fpkt"];
1672--2240[label="1;1pkt 1fpkt"];
1672--2453[label="1;1pkt 1fpkt"];
1672--2948[label="0.142857;1pkt 1fpkt"];
1672--3690[label="1;1pkt 1fpkt"];
1672--3961[label="1;1pkt 1fpkt"];
1672--4602[label="1;1pkt 1fpkt"];
1672--4618[label="1;1pkt 1fpkt"];
1672--5469[label="1;1pkt 1fpkt"];
1672--6089[label="1;1pkt 1fpkt"];
1672--6151[label="1;1pkt 1fpkt"];
1672--6446[label="1;1pkt 1fpkt"];
1672--6475[label="1;1pkt 1fpkt"];
1672--6594[label="1;1pkt 1fpkt"];
1672--6943[label="1;1pkt 1fpkt"];
1672--7413[label="0.333333;1pkt 1fpkt"];
1672--8398[label="1;1pkt 1fpkt"];
1807--6943[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="167.190.108.137" src_port="3151"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
724[label="145.105.93.39;d;7484pkt 7484fpkt", shape=diamond, color=yellow];
6184[label="218.144.131.107;s;26pkt 26fpkt", shape=diamond, color=yellow];
6938[label="145.105.93.39;d;3411pkt 3411fpkt", shape=hexagon, color=black];
10753[label="55.101.108.94;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12128[label="9.42.18.169;254pkt 254fpkt", shape=pentagon, color=darkviolet];
12899[label="187.180.179.214;71pkt 71fpkt", shape=pentagon, color=darkviolet];
15357[label="9.42.18.169;254pkt 254fpkt", shape=invtriangle, color=brown];
17284[label="9.42.18.169;254pkt 254fpkt", shape=invhouse, color=bisque];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.105.93.39:443}[99.8672%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.9532%)&lt;BR/&gt; 1053: (0.0340078%)&lt;BR/&gt; 22157: (0.0297568%)&lt;BR/&gt; 21956: (0.0297568%)&lt;BR/&gt; 19901: (0.0297568%)&gt;];
}
724--5112[label="0.000133618;1pkt 1fpkt"];
724--6184[label="0.769231;20pkt 20fpkt"];
724--6938[label="1;3411pkt 3411fpkt"];
724--8589[label="0.000133618;1pkt 1fpkt"];
724--8872[label="0.000133618;1pkt 1fpkt"];
724--9515[label="0.000133618;1pkt 1fpkt"];
724--10753[label="0.875;7pkt 7fpkt"];
724--12128[label="0.858268;218pkt 218fpkt"];
724--12899[label="0.929577;66pkt 66fpkt"];
724--13815[label="0.000133618;1pkt 1fpkt"];
724--15357[label="0.858268;218pkt 218fpkt"];
724--16344[label="0.000133618;1pkt 1fpkt"];
724--17284[label="0.858268;218pkt 218fpkt"];
6184--6938[label="0.269231;7pkt 7fpkt"];
6184--7206[label="0.0769231;2pkt 2fpkt"];
6184--8875[label="0.0769231;2pkt 2fpkt"];
6938--10753[label="0.625;5pkt 5fpkt"];
6938--12128[label="0.165354;42pkt 42fpkt"];
6938--12899[label="0.408451;29pkt 29fpkt"];
6938--15357[label="0.165354;42pkt 42fpkt"];
6938--17284[label="0.165354;42pkt 42fpkt"];
12128--15357[label="1;254pkt 254fpkt"];
12128--17284[label="1;254pkt 254fpkt"];
15357--17284[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.93.39" dst_port="443"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.168.24.225"/>
      <from sec="1284008960" usec="0"/>
      <to sec="1284009038" usec="0"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284009038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
2566[label="148.52.13.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
7168[label="148.52.13.164;s;1pkt 1fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.13.164:80, 42.241.80.94:61684}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61684: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2566--7168[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.94" dst_port="61684" src_ip="148.52.13.164" src_port="80"/>
    </slice>
    <from sec="1284008551" usec="0"/>
    <to sec="1284008563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1682[label="148.36.35.113;d;269pkt 269fpkt", shape=diamond, color=yellow];
7195[label="148.36.35.113;d;224pkt 224fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.36.35.113:25}[62.0818%]&lt;BR/&gt;{*:25, 148.36.35.113:*}[33.829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.7688%)&lt;BR/&gt; 113: (1.0142%)&lt;BR/&gt; 11218: (0.811359%)&lt;BR/&gt; 0: (0.40568%)&lt;BR/&gt; 64647: (0.20284%)&gt;];
}
1682--7195[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.35.113" src_port="25"/>
      <filter dst_ip="148.36.35.113" dst_port="25"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
2755[label="66.3.199.56;d;2pkt 2fpkt", shape=diamond, color=yellow];
3414[label="145.105.52.119;s;11pkt 11fpkt", shape=diamond, color=yellow];
7323[label="66.3.199.56;d;2pkt 2fpkt", shape=hexagon, color=black];
7629[label="145.105.52.119;s;8pkt 8fpkt", shape=hexagon, color=black];
11223[label="145.105.52.119;12pkt 12fpkt", shape=pentagon, color=darkviolet];
14824[label="145.105.52.119;12pkt 12fpkt", shape=invtriangle, color=brown];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.52.119:24973, *:*}[58.3333%]&lt;BR/&gt;{145.105.52.119:*, 190.21.150.233:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24973: (25.5319%)&lt;BR/&gt; 443: (12.766%)&lt;BR/&gt; 80: (11.7021%)&lt;BR/&gt; 4115: (6.38298%)&lt;BR/&gt; 4114: (6.38298%)&gt;];
}
2755--3414[label="1;2pkt 2fpkt"];
2755--7323[label="1;2pkt 2fpkt"];
2755--7629[label="1;2pkt 2fpkt"];
2755--11223[label="1;2pkt 2fpkt"];
2755--14824[label="1;2pkt 2fpkt"];
3414--7323[label="1;2pkt 2fpkt"];
3414--7629[label="1;8pkt 8fpkt"];
3414--8884[label="0.0909091;1pkt 1fpkt"];
3414--8902[label="0.0909091;1pkt 1fpkt"];
3414--11223[label="1;11pkt 11fpkt"];
3414--14824[label="1;11pkt 11fpkt"];
7323--7629[label="1;2pkt 2fpkt"];
7323--11223[label="1;2pkt 2fpkt"];
7323--14824[label="1;2pkt 2fpkt"];
7629--8884[label="0.125;1pkt 1fpkt"];
7629--11223[label="1;8pkt 8fpkt"];
7629--14824[label="1;8pkt 8fpkt"];
11223--14824[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.52.119" src_port="24973"/>
      <filter dst_ip="190.21.150.233" dst_port="80" src_ip="145.105.52.119"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1040[label="167.190.110.106;d;4pkt 4fpkt", shape=diamond, color=yellow];
7327[label="167.190.110.106;d;4pkt 4fpkt", shape=hexagon, color=black];
11071[label="57.140.16.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.140.16.111:80, 167.190.110.106:1386}[25%]&lt;BR/&gt;{108.160.40.229:80, 167.190.110.106:1396}[25%]&lt;BR/&gt;{38.0.145.1:80, 167.190.110.106:1394}[25%]&lt;BR/&gt;{38.0.145.1:80, 167.190.110.106:1395}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1386: (16.6667%)&lt;BR/&gt; 1396: (11.1111%)&lt;BR/&gt; 1395: (11.1111%)&lt;BR/&gt; 1394: (11.1111%)&gt;];
}
1040--7327[label="1;4pkt 4fpkt"];
1040--11071[label="1;1pkt 1fpkt"];
7327--11071[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.110.106" dst_port="1395" src_ip="38.0.145.1" src_port="80"/>
      <filter dst_ip="167.190.110.106" dst_port="1394" src_ip="38.0.145.1" src_port="80"/>
      <filter dst_ip="167.190.110.106" dst_port="1396" src_ip="108.160.40.229" src_port="80"/>
      <filter dst_ip="167.190.110.106" dst_port="1386" src_ip="57.140.16.111" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
141[label="45.69.57.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
142[label="145.105.167.95;s;51pkt 51fpkt", shape=diamond, color=yellow];
1077[label="187.4.144.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
6557[label="45.69.57.177;d;1pkt 1fpkt", shape=hexagon, color=black];
7334[label="187.4.144.44;d;1pkt 1fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.167.95:51413, *:*}[90.1961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51413: (45.4545%)&lt;BR/&gt; 60997: (2.72727%)&lt;BR/&gt; 18270: (2.72727%)&lt;BR/&gt; 60881: (1.81818%)&lt;BR/&gt; 16001: (1.81818%)&gt;];
}
141--142[label="1;1pkt 1fpkt"];
141--6557[label="1;1pkt 1fpkt"];
142--1077[label="1;1pkt 1fpkt"];
142--6557[label="1;1pkt 1fpkt"];
142--7334[label="1;1pkt 1fpkt"];
142--8884[label="0.0196078;1pkt 1fpkt"];
142--8894[label="0.0196078;1pkt 1fpkt"];
142--8902[label="0.0392157;2pkt 2fpkt"];
142--8909[label="0.0392157;2pkt 2fpkt"];
1077--7334[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.167.95" src_port="51413"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1400[label="209.160.67.144;d;68pkt 68fpkt", shape=diamond, color=yellow];
1401[label="148.52.132.224;s;155pkt 155fpkt", shape=diamond, color=yellow];
5597[label="148.52.181.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
7436[label="209.160.67.144;d;30pkt 30fpkt", shape=hexagon, color=black];
11522[label="148.52.181.136;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.132.224:80, 209.160.67.144:*}[41.5094%]&lt;BR/&gt;{148.52.132.224:80, 198.74.171.54:*}[23.8994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64491: (0.583658%)&lt;BR/&gt; 64154: (0.583658%)&lt;BR/&gt; 62632: (0.583658%)&lt;BR/&gt; 59611: (0.583658%)&gt;];
}
1400--1401[label="0.970588;66pkt 66fpkt"];
1400--5597[label="1;1pkt 1fpkt"];
1400--7436[label="1;30pkt 30fpkt"];
1400--11522[label="0.333333;1pkt 1fpkt"];
1401--7436[label="1;30pkt 30fpkt"];
5597--11522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.160.67.144" src_ip="148.52.132.224" src_port="80"/>
      <filter dst_ip="198.74.171.54" src_ip="148.52.132.224" src_port="80"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284009212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1911[label="145.105.184.240;s;218pkt 218fpkt", shape=diamond, color=yellow];
3028[label="20.20.64.89;d;84pkt 84fpkt", shape=diamond, color=yellow];
7449[label="20.20.64.89;d;54pkt 54fpkt", shape=hexagon, color=black];
13298[label="145.105.184.240;285pkt 285fpkt", shape=pentagon, color=darkviolet];
16018[label="145.105.184.240;285pkt 285fpkt", shape=invtriangle, color=brown];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.184.240:25, 20.20.64.89:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.1382%)&lt;BR/&gt; 0: (4.75162%)&lt;BR/&gt; 1678: (0.37797%)&lt;BR/&gt; 1558: (0.37797%)&lt;BR/&gt; 1522: (0.37797%)&gt;];
}
1911--3028[label="0.857143;72pkt 72fpkt"];
1911--5607[label="0.00458716;1pkt 1fpkt"];
1911--6784[label="0.00689655;1pkt 1fpkt"];
1911--6928[label="0.00675676;1pkt 1fpkt"];
1911--7449[label="1;54pkt 54fpkt"];
1911--13298[label="1;218pkt 218fpkt"];
1911--16018[label="1;218pkt 218fpkt"];
3028--7449[label="1;54pkt 54fpkt"];
3028--13298[label="1;84pkt 84fpkt"];
3028--16018[label="1;84pkt 84fpkt"];
7449--13298[label="1;54pkt 54fpkt"];
7449--16018[label="1;54pkt 54fpkt"];
13298--16018[label="1;285pkt 285fpkt"];
</description>
    <slice>
      <filter dst_ip="20.20.64.89" src_ip="145.105.184.240" src_port="25"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
680[label="167.190.65.183;s;3pkt 3fpkt", shape=diamond, color=yellow];
681[label="61.169.201.98;d;3pkt 3fpkt", shape=diamond, color=yellow];
7595[label="61.169.201.98;d;3pkt 3fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.65.31:52096, 61.169.201.98:21057}[20%]&lt;BR/&gt;{167.190.65.31:52096, 61.169.201.98:13095}[20%]&lt;BR/&gt;{167.190.65.183:55987, 223.150.36.18:12975}[20%]&lt;BR/&gt;{167.190.65.183:61667, 145.119.151.247:123}[20%]&lt;BR/&gt;{167.190.65.183:62682, 61.169.201.98:13095}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13095: (27.7778%)&lt;BR/&gt; 52096: (22.2222%)&lt;BR/&gt; 62682: (16.6667%)&lt;BR/&gt; 21057: (11.1111%)&lt;BR/&gt; 61667: (5.55556%)&gt;];
}
680--681[label="0.333333;1pkt 1fpkt"];
680--7595[label="0.333333;1pkt 1fpkt"];
681--7595[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="61.169.201.98" dst_port="13095" src_ip="167.190.65.183" src_port="62682"/>
      <filter dst_ip="145.119.151.247" dst_port="123" src_ip="167.190.65.183" src_port="61667"/>
      <filter dst_ip="223.150.36.18" dst_port="12975" src_ip="167.190.65.183" src_port="55987"/>
      <filter dst_ip="61.169.201.98" dst_port="13095" src_ip="167.190.65.31" src_port="52096"/>
      <filter dst_ip="61.169.201.98" dst_port="21057" src_ip="167.190.65.31" src_port="52096"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
2835[label="148.36.16.131;d;428pkt 428fpkt", shape=diamond, color=yellow];
7648[label="148.36.16.131;d;320pkt 320fpkt", shape=hexagon, color=black];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.36.16.131:6881}[99.7664%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (49.8663%)&lt;BR/&gt; 65428: (0.13369%)&lt;BR/&gt; 65425: (0.13369%)&lt;BR/&gt; 65362: (0.13369%)&lt;BR/&gt; 65176: (0.13369%)&gt;];
}
2835--7648[label="1;320pkt 320fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.16.131" dst_port="6881"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
3556[label="137.5.130.159;s;988pkt 988fpkt", shape=diamond, color=yellow];
7679[label="137.5.130.159;s;495pkt 495fpkt", shape=hexagon, color=black];
11924[label="137.5.130.159;1219pkt 1219fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.5.130.159:*, *:8612}[78.4249%]&lt;BR/&gt;{137.5.130.159:*, *:8611}[21.5751%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8612: (39.6558%)&lt;BR/&gt; 8611: (10.3442%)&lt;BR/&gt; 1904: (1.77646%)&lt;BR/&gt; 1902: (1.77646%)&lt;BR/&gt; 1897: (1.77646%)&gt;];
}
3556--7679[label="1;495pkt 495fpkt"];
3556--11924[label="1;988pkt 988fpkt"];
7679--11924[label="1;495pkt 495fpkt"];
</description>
    <slice>
      <filter dst_port="8612" src_ip="137.5.130.159"/>
      <filter dst_port="8611" src_ip="137.5.130.159"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
2719[label="145.105.160.10;d;392pkt 392fpkt", shape=diamond, color=yellow];
7813[label="145.105.160.10;d;229pkt 229fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:123, 145.105.160.10:123}[36.9898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (67.6329%)&lt;BR/&gt; 53: (1.44928%)&lt;BR/&gt; 0: (0.966184%)&lt;BR/&gt; 2050: (0.644122%)&lt;BR/&gt; 80: (0.483092%)&gt;];
}
2719--4409[label="0.00775194;1pkt 1fpkt"];
2719--5112[label="0.00255102;1pkt 1fpkt"];
2719--7813[label="1;229pkt 229fpkt"];
2719--8589[label="0.00255102;1pkt 1fpkt"];
2719--8872[label="0.00255102;1pkt 1fpkt"];
2719--8883[label="0.00255102;1pkt 1fpkt"];
2719--8893[label="0.00255102;1pkt 1fpkt"];
2719--8909[label="0.00255102;1pkt 1fpkt"];
2719--8914[label="0.00510204;2pkt 2fpkt"];
2719--9515[label="0.00255102;1pkt 1fpkt"];
2719--12117[label="0.00947867;2pkt 2fpkt"];
2719--13815[label="0.00255102;1pkt 1fpkt"];
2719--15352[label="0.00947867;2pkt 2fpkt"];
2719--16344[label="0.00255102;1pkt 1fpkt"];
7813--8883[label="0.00436681;1pkt 1fpkt"];
7813--8893[label="0.00436681;1pkt 1fpkt"];
7813--8914[label="0.00873362;2pkt 2fpkt"];
7813--12117[label="0.00947867;2pkt 2fpkt"];
7813--15352[label="0.00947867;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.160.10" dst_port="123" src_port="123"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1942[label="33.22.231.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
1943[label="145.105.226.236;s;44pkt 44fpkt", shape=diamond, color=yellow];
6993[label="33.22.231.93;d;1pkt 1fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.226.236:*, *:80}[40.9091%]&lt;BR/&gt;{145.105.226.236:*, *:20480}[38.6364%]&lt;BR/&gt;{145.105.226.236:*, 36.23.175.112:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.6522%)&lt;BR/&gt; 20480: (18.4783%)&lt;BR/&gt; 5100: (6.52174%)&lt;BR/&gt; 60362: (3.26087%)&lt;BR/&gt; 443: (3.26087%)&gt;];
}
1942--1943[label="1;1pkt 1fpkt"];
1942--6993[label="1;1pkt 1fpkt"];
1943--3488[label="0.0454545;2pkt 2fpkt"];
1943--6993[label="1;1pkt 1fpkt"];
1943--7872[label="0.0454545;2pkt 2fpkt"];
1943--8884[label="0.0227273;1pkt 1fpkt"];
1943--8894[label="0.113636;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="36.23.175.112" src_ip="145.105.226.236"/>
      <filter dst_port="80" src_ip="145.105.226.236"/>
      <filter dst_port="20480" src_ip="145.105.226.236"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1264[label="167.190.225.156;d;107pkt 107fpkt", shape=diamond, color=yellow];
7889[label="167.190.225.156;d;75pkt 75fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.190.225.156:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64608: (0.549451%)&lt;BR/&gt; 64175: (0.549451%)&lt;BR/&gt; 62329: (0.549451%)&lt;BR/&gt; 61084: (0.549451%)&gt;];
}
1264--7889[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.225.156" dst_port="25"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
1307[label="167.190.180.72;d;100pkt 100fpkt", shape=diamond, color=yellow];
1310[label="33.73.181.170;s;33pkt 33fpkt", shape=diamond, color=yellow];
6156[label="32.13.100.53;s;77pkt 77fpkt", shape=diamond, color=yellow];
7902[label="167.190.180.72;d;79pkt 79fpkt", shape=hexagon, color=black];
9966[label="32.13.100.53;79pkt 79fpkt", shape=pentagon, color=darkviolet];
12165[label="33.73.181.170;39pkt 39fpkt", shape=pentagon, color=darkviolet];
12443[label="209.160.67.187;24pkt 24fpkt", shape=pentagon, color=darkviolet];
14082[label="32.13.100.53;79pkt 79fpkt", shape=invtriangle, color=brown];
16518[label="32.13.100.53;79pkt 79fpkt", shape=invhouse, color=bisque];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.13.100.53:*, 167.190.180.72:80}[52.027%]&lt;BR/&gt;{33.73.181.170:*, 167.190.180.72:80}[26.3514%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8115%)&lt;BR/&gt; 2641: (0.679117%)&lt;BR/&gt; 57234: (0.509338%)&lt;BR/&gt; 57199: (0.509338%)&lt;BR/&gt; 56505: (0.509338%)&gt;];
}
1307--1310[label="0.818182;27pkt 27fpkt"];
1307--6156[label="0.662338;51pkt 51fpkt"];
1307--7902[label="1;79pkt 79fpkt"];
1307--8884[label="0.13;13pkt 13fpkt"];
1307--8894[label="0.09;9pkt 9fpkt"];
1307--8902[label="0.05;5pkt 5fpkt"];
1307--8909[label="0.09;9pkt 9fpkt"];
1307--9966[label="0.64557;51pkt 51fpkt"];
1307--12165[label="0.692308;27pkt 27fpkt"];
1307--12443[label="0.666667;16pkt 16fpkt"];
1307--14082[label="0.64557;51pkt 51fpkt"];
1307--16518[label="0.64557;51pkt 51fpkt"];
1310--7902[label="0.545455;18pkt 18fpkt"];
1310--8884[label="0.121212;4pkt 4fpkt"];
1310--8894[label="0.121212;4pkt 4fpkt"];
1310--8902[label="0.0909091;3pkt 3fpkt"];
1310--8909[label="0.121212;4pkt 4fpkt"];
1310--12165[label="1;33pkt 33fpkt"];
6156--7902[label="0.506494;39pkt 39fpkt"];
6156--8884[label="0.0779221;6pkt 6fpkt"];
6156--8894[label="0.012987;1pkt 1fpkt"];
6156--8902[label="0.012987;1pkt 1fpkt"];
6156--8909[label="0.0519481;4pkt 4fpkt"];
6156--9966[label="1;77pkt 77fpkt"];
6156--14082[label="1;77pkt 77fpkt"];
6156--16518[label="1;77pkt 77fpkt"];
7902--8884[label="0.164557;13pkt 13fpkt"];
7902--8894[label="0.113924;9pkt 9fpkt"];
7902--8902[label="0.0253165;2pkt 2fpkt"];
7902--8909[label="0.0126582;1pkt 1fpkt"];
7902--9966[label="0.493671;39pkt 39fpkt"];
7902--12165[label="0.461538;18pkt 18fpkt"];
7902--12443[label="0.666667;16pkt 16fpkt"];
7902--14082[label="0.493671;39pkt 39fpkt"];
7902--16518[label="0.493671;39pkt 39fpkt"];
9966--14082[label="1;79pkt 79fpkt"];
9966--16518[label="1;79pkt 79fpkt"];
14082--16518[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.72" dst_port="80" src_ip="32.13.100.53"/>
      <filter dst_ip="167.190.180.72" dst_port="80" src_ip="33.73.181.170"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
472[label="167.190.109.211;d;91pkt 91fpkt", shape=diamond, color=yellow];
878[label="41.102.95.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
1857[label="182.9.15.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
2035[label="120.90.135.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
2230[label="192.247.101.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
2232[label="223.228.96.241;s;1pkt 1fpkt", shape=diamond, color=yellow];
2269[label="32.70.78.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
2634[label="37.205.79.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
2912[label="38.245.37.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
2914[label="40.24.144.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
2962[label="69.36.14.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
2975[label="54.151.76.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
2977[label="9.16.230.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
3004[label="46.156.110.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
3022[label="0.174.241.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
3518[label="122.136.247.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
3549[label="156.211.128.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
3589[label="64.88.200.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
3630[label="34.166.203.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
3699[label="120.244.215.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
3964[label="37.166.47.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
4102[label="35.113.191.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
4107[label="46.148.127.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
4137[label="2.19.138.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
4152[label="46.141.174.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
4154[label="193.143.174.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
4755[label="3.130.11.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
4760[label="122.133.1.151;s;1pkt 1fpkt", shape=diamond, color=yellow];
4787[label="46.204.163.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
5014[label="32.74.204.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
5295[label="32.86.9.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
5793[label="168.136.88.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
5956[label="37.50.216.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
5995[label="2.146.224.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
6230[label="19.98.25.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
6348[label="46.21.60.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
6375[label="21.34.0.42;s;1pkt 1fpkt", shape=diamond, color=yellow];
6631[label="167.190.109.211;d;51pkt 51fpkt", shape=hexagon, color=black];
7691[label="223.228.96.241;s;1pkt 1fpkt", shape=hexagon, color=black];
7934[label="0.174.241.134;s;1pkt 1fpkt", shape=hexagon, color=black];
7981[label="120.244.215.108;s;1pkt 1fpkt", shape=hexagon, color=black];
11039[label="120.244.215.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11533[label="41.102.95.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12554[label="1.25.41.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.190.109.211:13511}[86.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13511: (46.2366%)&lt;BR/&gt; 1889: (2.95699%)&lt;BR/&gt; 8800: (1.88172%)&lt;BR/&gt; 62007: (1.07527%)&lt;BR/&gt; 61704: (1.07527%)&gt;];
}
472--878[label="0.5;1pkt 1fpkt"];
472--1857[label="1;1pkt 1fpkt"];
472--2035[label="1;1pkt 1fpkt"];
472--2230[label="1;1pkt 1fpkt"];
472--2232[label="1;1pkt 1fpkt"];
472--2269[label="1;1pkt 1fpkt"];
472--2634[label="1;1pkt 1fpkt"];
472--2912[label="1;1pkt 1fpkt"];
472--2914[label="1;1pkt 1fpkt"];
472--2962[label="1;1pkt 1fpkt"];
472--2975[label="1;1pkt 1fpkt"];
472--2977[label="1;1pkt 1fpkt"];
472--3004[label="1;1pkt 1fpkt"];
472--3022[label="1;1pkt 1fpkt"];
472--3518[label="1;1pkt 1fpkt"];
472--3549[label="1;1pkt 1fpkt"];
472--3589[label="1;1pkt 1fpkt"];
472--3630[label="1;1pkt 1fpkt"];
472--3699[label="1;1pkt 1fpkt"];
472--3964[label="1;1pkt 1fpkt"];
472--4102[label="1;1pkt 1fpkt"];
472--4107[label="1;1pkt 1fpkt"];
472--4137[label="1;1pkt 1fpkt"];
472--4152[label="1;1pkt 1fpkt"];
472--4154[label="1;1pkt 1fpkt"];
472--4755[label="1;1pkt 1fpkt"];
472--4760[label="1;1pkt 1fpkt"];
472--4787[label="1;1pkt 1fpkt"];
472--5014[label="1;1pkt 1fpkt"];
472--5295[label="1;1pkt 1fpkt"];
472--5793[label="1;1pkt 1fpkt"];
472--5956[label="1;1pkt 1fpkt"];
472--5995[label="1;1pkt 1fpkt"];
472--6230[label="1;1pkt 1fpkt"];
472--6348[label="1;1pkt 1fpkt"];
472--6375[label="1;1pkt 1fpkt"];
472--6631[label="1;51pkt 51fpkt"];
472--7691[label="1;1pkt 1fpkt"];
472--7934[label="1;1pkt 1fpkt"];
472--7981[label="1;1pkt 1fpkt"];
472--11039[label="1;1pkt 1fpkt"];
472--11533[label="0.5;1pkt 1fpkt"];
472--12554[label="1;1pkt 1fpkt"];
878--6631[label="0.5;1pkt 1fpkt"];
878--11533[label="1;2pkt 2fpkt"];
1857--6631[label="1;1pkt 1fpkt"];
2035--6631[label="1;1pkt 1fpkt"];
2230--6631[label="1;1pkt 1fpkt"];
2232--6631[label="1;1pkt 1fpkt"];
2232--7691[label="1;1pkt 1fpkt"];
2269--6631[label="1;1pkt 1fpkt"];
2634--6631[label="1;1pkt 1fpkt"];
2912--6631[label="1;1pkt 1fpkt"];
2914--6631[label="1;1pkt 1fpkt"];
2962--6631[label="1;1pkt 1fpkt"];
2975--6631[label="1;1pkt 1fpkt"];
2977--6631[label="1;1pkt 1fpkt"];
3004--6631[label="1;1pkt 1fpkt"];
3022--6631[label="1;1pkt 1fpkt"];
3022--7934[label="1;1pkt 1fpkt"];
3518--6631[label="1;1pkt 1fpkt"];
3549--6631[label="1;1pkt 1fpkt"];
3589--6631[label="1;1pkt 1fpkt"];
3630--6631[label="1;1pkt 1fpkt"];
3699--7981[label="1;1pkt 1fpkt"];
3699--11039[label="1;1pkt 1fpkt"];
3964--6631[label="1;1pkt 1fpkt"];
4102--6631[label="1;1pkt 1fpkt"];
4107--6631[label="1;1pkt 1fpkt"];
4137--6631[label="1;1pkt 1fpkt"];
4152--6631[label="1;1pkt 1fpkt"];
4154--6631[label="1;1pkt 1fpkt"];
4755--6631[label="1;1pkt 1fpkt"];
4760--6631[label="1;1pkt 1fpkt"];
4787--6631[label="1;1pkt 1fpkt"];
5295--6631[label="1;1pkt 1fpkt"];
5793--6631[label="1;1pkt 1fpkt"];
6230--6631[label="1;1pkt 1fpkt"];
6631--7691[label="1;1pkt 1fpkt"];
6631--7934[label="1;1pkt 1fpkt"];
6631--11533[label="0.5;1pkt 1fpkt"];
6631--12554[label="1;1pkt 1fpkt"];
7981--11039[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.109.211" dst_port="13511"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
3253[label="42.241.80.86;d;2pkt 2fpkt", shape=diamond, color=yellow];
7994[label="42.241.80.86;d;2pkt 2fpkt", shape=hexagon, color=black];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.167.155:80, 42.241.80.86:35743}[50%]&lt;BR/&gt;{145.105.76.214:80, 42.241.80.86:65508}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65508: (25%)&lt;BR/&gt; 35743: (25%)&gt;];
}
3253--7994[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.86" dst_port="65508" src_ip="145.105.76.214" src_port="80"/>
      <filter dst_ip="42.241.80.86" dst_port="35743" src_ip="145.105.167.155" src_port="80"/>
    </slice>
    <from sec="1284008606" usec="0"/>
    <to sec="1284008767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
2052[label="199.56.48.33;s;837pkt 837fpkt", shape=diamond, color=yellow];
7643[label="199.56.48.33;s;826pkt 826fpkt", shape=hexagon, color=black];
9577[label="199.56.48.33;837pkt 837fpkt", shape=pentagon, color=darkviolet];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.48.33:*, *:53}[97.73%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.9%)&lt;BR/&gt; 0: (2.12%)&lt;BR/&gt; 60382: (0.12%)&lt;BR/&gt; 64093: (0.06%)&lt;BR/&gt; 64091: (0.06%)&gt;];
}
2052--3383[label="0.0298686;25pkt 25fpkt"];
2052--3488[label="0.00552486;1pkt 1fpkt"];
2052--3899[label="0.0191159;16pkt 16fpkt"];
2052--3904[label="0.0143369;12pkt 12fpkt"];
2052--3942[label="0.00854701;1pkt 1fpkt"];
2052--5239[label="0.00326264;2pkt 2fpkt"];
2052--7643[label="1;826pkt 826fpkt"];
2052--7815[label="0.0104167;1pkt 1fpkt"];
2052--7872[label="0.00769231;1pkt 1fpkt"];
2052--8053[label="0.0107527;9pkt 9fpkt"];
2052--8060[label="0.0201005;12pkt 12fpkt"];
2052--8833[label="0.0201005;12pkt 12fpkt"];
2052--9577[label="1;837pkt 837fpkt"];
7643--7815[label="0.0104167;1pkt 1fpkt"];
7643--8053[label="0.0108959;9pkt 9fpkt"];
7643--8060[label="0.0201005;12pkt 12fpkt"];
7643--8833[label="0.0201005;12pkt 12fpkt"];
7643--9577[label="1;826pkt 826fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="199.56.48.33"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
399[label="38.3.106.4;d;28pkt 28fpkt", shape=diamond, color=yellow];
8063[label="38.3.106.4;d;28pkt 28fpkt", shape=hexagon, color=black];
9431[label="198.45.128.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17185, 38.3.106.4:35509}[60.7143%]&lt;BR/&gt;{*:17185, 38.3.106.4:58200}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17185: (50%)&lt;BR/&gt; 35509: (29.8246%)&lt;BR/&gt; 58200: (18.4211%)&lt;BR/&gt; 56270: (1.75439%)&gt;];
}
399--8063[label="1;28pkt 28fpkt"];
399--9431[label="1;1pkt 1fpkt"];
8063--9431[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.3.106.4" dst_port="35509" src_port="17185"/>
      <filter dst_ip="38.3.106.4" dst_port="58200" src_port="17185"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
2910[label="203.214.117.8;d;1124pkt 1124fpkt", shape=diamond, color=yellow];
3514[label="131.60.130.45;s;1451pkt 1451fpkt", shape=diamond, color=yellow];
8163[label="203.214.117.8;d;1124pkt 1124fpkt", shape=hexagon, color=black];
9830[label="131.60.130.45;1748pkt 1748fpkt", shape=pentagon, color=darkviolet];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.130.45:*, 203.214.117.8:80}[97.9821%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42956: (0.0550762%)&lt;BR/&gt; 43979: (0.0367175%)&lt;BR/&gt; 43978: (0.0367175%)&lt;BR/&gt; 43977: (0.0367175%)&gt;];
}
2910--3514[label="0.967972;1088pkt 1088fpkt"];
2910--8163[label="1;1124pkt 1124fpkt"];
2910--8884[label="0.0907473;102pkt 102fpkt"];
2910--8894[label="0.091637;103pkt 103fpkt"];
2910--9830[label="0.967972;1088pkt 1088fpkt"];
3514--8163[label="0.967972;1088pkt 1088fpkt"];
3514--8884[label="0.0682288;99pkt 99fpkt"];
3514--8894[label="0.0682288;99pkt 99fpkt"];
3514--8902[label="0.0682288;99pkt 99fpkt"];
3514--8909[label="0.0454859;66pkt 66fpkt"];
3514--9830[label="1;1451pkt 1451fpkt"];
8163--8884[label="0.0907473;102pkt 102fpkt"];
8163--8894[label="0.091637;103pkt 103fpkt"];
8163--9830[label="0.967972;1088pkt 1088fpkt"];
</description>
    <slice>
      <filter dst_ip="203.214.117.8" dst_port="80" src_ip="131.60.130.45"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
5053[label="25.190.161.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
5990[label="145.105.255.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
12612[label="145.105.255.196;12pkt 12fpkt", shape=pentagon, color=darkviolet];
15641[label="145.105.255.196;12pkt 12fpkt", shape=invtriangle, color=brown];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.255.196:*, 32.152.6.157:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.3077%)&lt;BR/&gt; 6360: (7.69231%)&lt;BR/&gt; 3400: (7.69231%)&lt;BR/&gt; 3379: (3.84615%)&lt;BR/&gt; 3361: (3.84615%)&gt;];
}
5053--5990[label="1;1pkt 1fpkt"];
5053--12612[label="1;1pkt 1fpkt"];
5053--15641[label="1;1pkt 1fpkt"];
5990--12612[label="1;1pkt 1fpkt"];
5990--15641[label="1;1pkt 1fpkt"];
12612--15641[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="32.152.6.157" dst_port="80" src_ip="145.105.255.196"/>
    </slice>
    <from sec="1284008547" usec="0"/>
    <to sec="1284009056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
2121[label="167.190.202.47;s;290pkt 290fpkt", shape=diamond, color=yellow];
3668[label="21.143.127.10;d;2pkt 2fpkt", shape=diamond, color=yellow];
3681[label="216.38.102.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
3689[label="218.64.36.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
5090[label="221.99.39.246;d;6pkt 6fpkt", shape=diamond, color=yellow];
8230[label="21.143.127.10;d;1pkt 1fpkt", shape=hexagon, color=black];
8234[label="216.38.102.206;d;1pkt 1fpkt", shape=hexagon, color=black];
8235[label="218.64.36.123;d;1pkt 1fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.202.47:13426, *:*}[35.8621%]&lt;BR/&gt;{167.190.202.47:*, *:80}[29.6552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13426: (17.1617%)&lt;BR/&gt; 80: (15.1815%)&lt;BR/&gt; 8889: (10.066%)&lt;BR/&gt; 8000: (8.41584%)&lt;BR/&gt; 443: (2.64026%)&gt;];
}
2121--2259[label="0.00540541;1pkt 1fpkt"];
2121--3668[label="1;2pkt 2fpkt"];
2121--3681[label="1;1pkt 1fpkt"];
2121--3689[label="1;1pkt 1fpkt"];
2121--5090[label="1;6pkt 6fpkt"];
2121--8065[label="0.0114943;1pkt 1fpkt"];
2121--8230[label="1;1pkt 1fpkt"];
2121--8234[label="1;1pkt 1fpkt"];
2121--8235[label="1;1pkt 1fpkt"];
2121--8884[label="0.00689655;2pkt 2fpkt"];
2121--8902[label="0.0827586;24pkt 24fpkt"];
2121--8909[label="0.0206897;6pkt 6fpkt"];
3668--8230[label="1;1pkt 1fpkt"];
3681--8234[label="1;1pkt 1fpkt"];
3689--8235[label="1;1pkt 1fpkt"];
5090--8902[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="167.190.202.47" src_port="13426"/>
      <filter dst_port="80" src_ip="167.190.202.47"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.132.65.68"/>
      <from sec="1284008835" usec="0"/>
      <to sec="1284008937" usec="0"/>
    </slice>
    <from sec="1284008835" usec="0"/>
    <to sec="1284008937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
5092[label="23.86.124.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
8290[label="23.86.124.16;d;1pkt 1fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.52.97:80, 23.86.124.16:34416}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34416: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5092--8290[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.86.124.16" dst_port="34416" src_ip="199.56.52.97" src_port="80"/>
    </slice>
    <from sec="1284008906" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20773,2.44227,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
1910[label="145.105.184.240;d;129pkt 129fpkt", shape=diamond, color=yellow];
3029[label="20.20.64.89;s;84pkt 84fpkt", shape=diamond, color=yellow];
8356[label="145.105.184.240;d;129pkt 129fpkt", shape=hexagon, color=black];
10665[label="20.20.64.89;90pkt 90fpkt", shape=pentagon, color=darkviolet];
11491[label="217.22.34.135;43pkt 43fpkt", shape=pentagon, color=darkviolet];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.20.64.89:*, 145.105.184.240:25}[54.2169%]&lt;BR/&gt;{217.22.34.135:*, 145.105.184.240:25}[25.9036%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.7368%)&lt;BR/&gt; 53: (0.631579%)&lt;BR/&gt; 1938: (0.421053%)&lt;BR/&gt; 1935: (0.421053%)&lt;BR/&gt; 1931: (0.421053%)&gt;];
}
1910--3029[label="0.785714;66pkt 66fpkt"];
1910--5112[label="0.00775194;1pkt 1fpkt"];
1910--5753[label="0.0155039;2pkt 2fpkt"];
1910--8356[label="1;129pkt 129fpkt"];
1910--8589[label="0.00775194;1pkt 1fpkt"];
1910--8872[label="0.00775194;1pkt 1fpkt"];
1910--8883[label="0.00775194;1pkt 1fpkt"];
1910--8893[label="0.0155039;2pkt 2fpkt"];
1910--8901[label="0.0155039;2pkt 2fpkt"];
1910--8908[label="0.0155039;2pkt 2fpkt"];
1910--9515[label="0.00775194;1pkt 1fpkt"];
1910--10665[label="0.733333;66pkt 66fpkt"];
1910--11491[label="0.697674;30pkt 30fpkt"];
1910--13815[label="0.00775194;1pkt 1fpkt"];
1910--16344[label="0.00775194;1pkt 1fpkt"];
3029--8356[label="0.785714;66pkt 66fpkt"];
3029--10665[label="1;84pkt 84fpkt"];
8356--8589[label="0.00775194;1pkt 1fpkt"];
8356--8872[label="0.00775194;1pkt 1fpkt"];
8356--8883[label="0.00775194;1pkt 1fpkt"];
8356--8893[label="0.0155039;2pkt 2fpkt"];
8356--8901[label="0.0155039;2pkt 2fpkt"];
8356--8908[label="0.0155039;2pkt 2fpkt"];
8356--9515[label="0.00775194;1pkt 1fpkt"];
8356--10665[label="0.733333;66pkt 66fpkt"];
8356--11491[label="0.697674;30pkt 30fpkt"];
8356--13815[label="0.00775194;1pkt 1fpkt"];
8356--16344[label="0.00775194;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.184.240" dst_port="25" src_ip="20.20.64.89"/>
      <filter dst_ip="145.105.184.240" dst_port="25" src_ip="217.22.34.135"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
885[label="21.227.63.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
1864[label="198.32.104.48;s;2pkt 2fpkt", shape=diamond, color=yellow];
2263[label="202.12.75.6;d;10pkt 10fpkt", shape=diamond, color=yellow];
2376[label="198.32.104.246;s;29pkt 29fpkt", shape=diamond, color=yellow];
8455[label="202.12.75.6;d;10pkt 10fpkt", shape=hexagon, color=black];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.104.246:80, 32.13.117.181:*}[61.2903%]&lt;BR/&gt;{198.32.104.246:80, 202.12.75.6:*}[29.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5759: (2.88462%)&lt;BR/&gt; 5434: (2.88462%)&lt;BR/&gt; 5379: (2.88462%)&lt;BR/&gt; 5360: (2.88462%)&gt;];
}
885--1864[label="1;1pkt 1fpkt"];
1864--2263[label="0.5;1pkt 1fpkt"];
1864--8455[label="0.5;1pkt 1fpkt"];
2263--2376[label="0.9;9pkt 9fpkt"];
2263--8455[label="1;10pkt 10fpkt"];
2376--8455[label="0.9;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="32.13.117.181" src_ip="198.32.104.246" src_port="80"/>
      <filter dst_ip="202.12.75.6" src_ip="198.32.104.246" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.0.152.60"/>
      <from sec="1284008608" usec="0"/>
      <to sec="1284009022" usec="0"/>
    </slice>
    <from sec="1284008608" usec="0"/>
    <to sec="1284009022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
3262[label="167.190.202.181;s;70pkt 70fpkt", shape=diamond, color=yellow];
4346[label="25.157.167.174;d;1pkt 1fpkt", shape=diamond, color=yellow];
8523[label="25.157.167.174;d;1pkt 1fpkt", shape=hexagon, color=black];
12358[label="167.190.202.181;72pkt 72fpkt", shape=pentagon, color=darkviolet];
15498[label="167.190.202.181;72pkt 72fpkt", shape=invtriangle, color=brown];
17360[label="167.190.202.181;72pkt 72fpkt", shape=invhouse, color=bisque];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.202.181:*, 25.157.167.38:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9583%)&lt;BR/&gt; 52892: (1.04167%)&lt;BR/&gt; 12320: (1.04167%)&lt;BR/&gt; 52930: (0.694444%)&lt;BR/&gt; 52929: (0.694444%)&gt;];
}
3262--4346[label="1;1pkt 1fpkt"];
3262--8523[label="1;1pkt 1fpkt"];
3262--8894[label="0.371429;26pkt 26fpkt"];
3262--8902[label="0.0285714;2pkt 2fpkt"];
3262--12358[label="1;70pkt 70fpkt"];
3262--15498[label="1;70pkt 70fpkt"];
3262--17360[label="1;70pkt 70fpkt"];
4346--8523[label="1;1pkt 1fpkt"];
4346--12358[label="1;1pkt 1fpkt"];
4346--15498[label="1;1pkt 1fpkt"];
4346--17360[label="1;1pkt 1fpkt"];
8523--12358[label="1;1pkt 1fpkt"];
8523--15498[label="1;1pkt 1fpkt"];
8523--17360[label="1;1pkt 1fpkt"];
12358--15498[label="1;72pkt 72fpkt"];
12358--17360[label="1;72pkt 72fpkt"];
15498--17360[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="25.157.167.38" dst_port="80" src_ip="167.190.202.181"/>
    </slice>
    <from sec="1284008611" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="22.200.21.177"/>
      <from sec="1284008691" usec="0"/>
      <to sec="1284009000" usec="0"/>
    </slice>
    <from sec="1284008691" usec="0"/>
    <to sec="1284009000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="122.13.40.183"/>
      <from sec="1284008697" usec="0"/>
      <to sec="1284009049" usec="0"/>
    </slice>
    <from sec="1284008697" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
4518[label="42.241.80.183;d;2pkt 2fpkt", shape=diamond, color=yellow];
8551[label="42.241.80.183;d;2pkt 2fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.1.76.12:80, 42.241.80.183:41604}[50%]&lt;BR/&gt;{148.52.179.228:80, 42.241.80.183:41187}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41604: (25%)&lt;BR/&gt; 41187: (25%)&gt;];
}
4518--8551[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.183" dst_port="41187" src_ip="148.52.179.228" src_port="80"/>
      <filter dst_ip="42.241.80.183" dst_port="41604" src_ip="144.1.76.12" src_port="80"/>
    </slice>
    <from sec="1284008794" usec="0"/>
    <to sec="1284008916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="23.192.191.70"/>
      <from sec="1284008805" usec="0"/>
      <to sec="1284008887" usec="0"/>
    </slice>
    <from sec="1284008805" usec="0"/>
    <to sec="1284008887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.96.26.5"/>
      <from sec="1284008820" usec="0"/>
      <to sec="1284009049" usec="0"/>
    </slice>
    <from sec="1284008820" usec="0"/>
    <to sec="1284009049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06896,2.52144,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.241.80.31"/>
      <from sec="1284008897" usec="0"/>
      <to sec="1284008941" usec="0"/>
    </slice>
    <from sec="1284008897" usec="0"/>
    <to sec="1284008941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
6444[label="19.111.80.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
8654[label="19.111.80.44;s;1pkt 1fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.111.80.44:11022, 145.105.180.123:15000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (50%)&lt;BR/&gt; 11022: (50%)&gt;];
}
6444--8654[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.180.123" dst_port="15000" src_ip="19.111.80.44" src_port="11022"/>
    </slice>
    <from sec="1284009071" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3107,2.41867,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
6538[label="209.27.188.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
8655[label="209.27.188.19;s;1pkt 1fpkt", shape=hexagon, color=black];
9334[label="209.27.188.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16276[label="209.27.188.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.27.188.19:80, 198.32.104.161:51497}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51497: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6538--8655[label="1;1pkt 1fpkt"];
6538--9334[label="1;1pkt 1fpkt"];
6538--16276[label="1;1pkt 1fpkt"];
8655--9334[label="1;1pkt 1fpkt"];
8655--16276[label="1;1pkt 1fpkt"];
9334--16276[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.104.161" dst_port="51497" src_ip="209.27.188.19" src_port="80"/>
    </slice>
    <from sec="1284009190" usec="0"/>
    <to sec="1284009251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.80.2.0"/>
    </slice>
    <from sec="1284008978" usec="0"/>
    <to sec="1284009024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.164.18.0"/>
    </slice>
    <from sec="1284008986" usec="0"/>
    <to sec="1284009001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.4.48.0"/>
    </slice>
    <from sec="1284008657" usec="0"/>
    <to sec="1284008674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.254.179.0"/>
    </slice>
    <from sec="1284008798" usec="0"/>
    <to sec="1284008826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.32.245.0"/>
    </slice>
    <from sec="1284008897" usec="0"/>
    <to sec="1284008977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.124.128.1"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.1.42.2"/>
    </slice>
    <from sec="1284008485" usec="0"/>
    <to sec="1284008773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.145.104.2"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.252.167.2"/>
    </slice>
    <from sec="1284009226" usec="0"/>
    <to sec="1284009261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.66.176.2"/>
    </slice>
    <from sec="1284009142" usec="0"/>
    <to sec="1284009176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
3940[label="148.52.203.2;s;632pkt 632fpkt", shape=diamond, color=yellow];
8982[label="148.52.203.2;708pkt 708fpkt", shape=pentagon, color=darkviolet];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.203.2:35677, *:*}[92.3729%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35677: (46.4179%)&lt;BR/&gt; 443: (2.83582%)&lt;BR/&gt; 80: (0.746269%)&lt;BR/&gt; 51433: (0.149254%)&lt;BR/&gt; 50629: (0.149254%)&gt;];
}
3940--8982[label="1;632pkt 632fpkt"];
</description>
    <slice>
      <filter src_ip="148.52.203.2" src_port="35677"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.30.6.3"/>
    </slice>
    <from sec="1284008434" usec="0"/>
    <to sec="1284009277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.50.6.3"/>
    </slice>
    <from sec="1284008858" usec="0"/>
    <to sec="1284008863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.190.30.3"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.81.128.3"/>
    </slice>
    <from sec="1284008463" usec="0"/>
    <to sec="1284008475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.68.244.3"/>
    </slice>
    <from sec="1284009253" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.165.93.4"/>
    </slice>
    <from sec="1284008672" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
400[label="38.3.106.4;s;28pkt 28fpkt", shape=diamond, color=yellow];
9018[label="38.3.106.4;27pkt 27fpkt", shape=pentagon, color=darkviolet];
13534[label="38.3.106.4;27pkt 27fpkt", shape=invtriangle, color=brown];
16172[label="38.3.106.4;28pkt 28fpkt", shape=invhouse, color=bisque];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.3.106.4:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
400--9018[label="1;27pkt 27fpkt"];
400--13534[label="1;27pkt 27fpkt"];
400--16172[label="1;28pkt 28fpkt"];
9018--13534[label="1;27pkt 27fpkt"];
9018--16172[label="1;27pkt 27fpkt"];
13534--16172[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="38.3.106.4"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.76.156.4"/>
    </slice>
    <from sec="1284009166" usec="0"/>
    <to sec="1284009185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.58.166.4"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.162.239.4"/>
    </slice>
    <from sec="1284008619" usec="0"/>
    <to sec="1284009275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.140.20.5"/>
    </slice>
    <from sec="1284008612" usec="0"/>
    <to sec="1284008910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
9035[label="222.4.74.5;130pkt 130fpkt", shape=pentagon, color=darkviolet];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.4.74.5:*, 164.12.27.22:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50050: (1.92308%)&lt;BR/&gt; 8000: (1.92308%)&lt;BR/&gt; 3128: (1.92308%)&lt;BR/&gt; 1075: (1.92308%)&lt;BR/&gt; 8110: (1.15385%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="164.12.27.22" src_ip="222.4.74.5"/>
    </slice>
    <from sec="1284008988" usec="0"/>
    <to sec="1284009192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.194.91.5"/>
    </slice>
    <from sec="1284008724" usec="0"/>
    <to sec="1284008817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
9039[label="25.6.148.5;232pkt 232fpkt", shape=pentagon, color=darkviolet];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.6.148.5:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
</description>
    <slice>
      <filter dst_port="5060" src_ip="25.6.148.5" src_port="5060"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.216.5"/>
    </slice>
    <from sec="1284009198" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.40.100.6"/>
    </slice>
    <from sec="1284008886" usec="0"/>
    <to sec="1284008908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.96.118.6"/>
    </slice>
    <from sec="1284008909" usec="0"/>
    <to sec="1284008921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.134.6"/>
    </slice>
    <from sec="1284009252" usec="0"/>
    <to sec="1284009281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.47.158.6"/>
    </slice>
    <from sec="1284009211" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.170.163.6"/>
    </slice>
    <from sec="1284008942" usec="0"/>
    <to sec="1284008980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.136.174.6"/>
    </slice>
    <from sec="1284009232" usec="0"/>
    <to sec="1284009242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.35.176.6"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.74.6.7"/>
    </slice>
    <from sec="1284009233" usec="0"/>
    <to sec="1284009247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.144.32.7"/>
    </slice>
    <from sec="1284008667" usec="0"/>
    <to sec="1284008780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.154.168.7"/>
    </slice>
    <from sec="1284009148" usec="0"/>
    <to sec="1284009161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.33.217.7"/>
    </slice>
    <from sec="1284009002" usec="0"/>
    <to sec="1284009102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.104.6.8"/>
    </slice>
    <from sec="1284008986" usec="0"/>
    <to sec="1284009005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.120.50.8"/>
    </slice>
    <from sec="1284009045" usec="0"/>
    <to sec="1284009128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.59.73.8"/>
    </slice>
    <from sec="1284008611" usec="0"/>
    <to sec="1284008626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.80.8"/>
    </slice>
    <from sec="1284008690" usec="0"/>
    <to sec="1284008724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.67.162.8"/>
    </slice>
    <from sec="1284009288" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.236.171.8"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.173.176.8"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.76.233.8"/>
    </slice>
    <from sec="1284008829" usec="0"/>
    <to sec="1284008840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.68.244.8"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.68.1.9"/>
    </slice>
    <from sec="1284008444" usec="0"/>
    <to sec="1284008502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.40.7.9"/>
    </slice>
    <from sec="1284009172" usec="0"/>
    <to sec="1284009259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.201.54.9"/>
    </slice>
    <from sec="1284009290" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.140.74.9"/>
    </slice>
    <from sec="1284009063" usec="0"/>
    <to sec="1284009157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.160.99.9"/>
    </slice>
    <from sec="1284009293" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
9125[label="198.32.109.9;208pkt 208fpkt", shape=pentagon, color=darkviolet];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.109.9:0, *:0}[99.5192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5192%)&lt;BR/&gt; 6000: (0.240385%)&lt;BR/&gt; 1433: (0.240385%)&gt;];
}
</description>
    <slice>
      <filter src_ip="198.32.109.9"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.114.134.9"/>
    </slice>
    <from sec="1284009182" usec="0"/>
    <to sec="1284009196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.241.164.9"/>
    </slice>
    <from sec="1284008877" usec="0"/>
    <to sec="1284008887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.76.178.9"/>
    </slice>
    <from sec="1284008592" usec="0"/>
    <to sec="1284008711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.96.202.9"/>
    </slice>
    <from sec="1284008727" usec="0"/>
    <to sec="1284008806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.81.243.9"/>
    </slice>
    <from sec="1284008785" usec="0"/>
    <to sec="1284008810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.18.3.10"/>
    </slice>
    <from sec="1284008489" usec="0"/>
    <to sec="1284008507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.12.22.10"/>
    </slice>
    <from sec="1284009074" usec="0"/>
    <to sec="1284009102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.26.36.10"/>
    </slice>
    <from sec="1284009129" usec="0"/>
    <to sec="1284009204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.124.38.10"/>
    </slice>
    <from sec="1284009164" usec="0"/>
    <to sec="1284009181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.86.105.10"/>
    </slice>
    <from sec="1284009248" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.1.119.10"/>
    </slice>
    <from sec="1284008623" usec="0"/>
    <to sec="1284008681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.67.120.10"/>
    </slice>
    <from sec="1284008819" usec="0"/>
    <to sec="1284008823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.90.133.10"/>
    </slice>
    <from sec="1284008442" usec="0"/>
    <to sec="1284008474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.27.145.10"/>
    </slice>
    <from sec="1284008937" usec="0"/>
    <to sec="1284009076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.58.168.10"/>
    </slice>
    <from sec="1284009075" usec="0"/>
    <to sec="1284009081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.88.176.10"/>
    </slice>
    <from sec="1284009121" usec="0"/>
    <to sec="1284009128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.2.229.10"/>
    </slice>
    <from sec="1284008975" usec="0"/>
    <to sec="1284009127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.66.11"/>
    </slice>
    <from sec="1284008989" usec="0"/>
    <to sec="1284009117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.31.80.11"/>
    </slice>
    <from sec="1284008920" usec="0"/>
    <to sec="1284008929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.118.87.11"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.85.136.11"/>
    </slice>
    <from sec="1284009160" usec="0"/>
    <to sec="1284009172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.33.189.11"/>
    </slice>
    <from sec="1284008529" usec="0"/>
    <to sec="1284008536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.130.193.11"/>
    </slice>
    <from sec="1284008975" usec="0"/>
    <to sec="1284009004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.138.236.11"/>
    </slice>
    <from sec="1284008945" usec="0"/>
    <to sec="1284009261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.78.23.12"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284008428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.162.110.12"/>
    </slice>
    <from sec="1284009149" usec="0"/>
    <to sec="1284009162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.162.111.12"/>
    </slice>
    <from sec="1284009137" usec="0"/>
    <to sec="1284009263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.12.115.12"/>
    </slice>
    <from sec="1284008901" usec="0"/>
    <to sec="1284008912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.25.115.12"/>
    </slice>
    <from sec="1284008734" usec="0"/>
    <to sec="1284008739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.169.167.12"/>
    </slice>
    <from sec="1284009059" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.193.39.13"/>
    </slice>
    <from sec="1284008965" usec="0"/>
    <to sec="1284008990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.35.117.13"/>
    </slice>
    <from sec="1284008795" usec="0"/>
    <to sec="1284008832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.35.188.13"/>
    </slice>
    <from sec="1284009154" usec="0"/>
    <to sec="1284009161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.31.236.13"/>
    </slice>
    <from sec="1284008819" usec="0"/>
    <to sec="1284008859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.80.17.14"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.146.74.14"/>
    </slice>
    <from sec="1284009178" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.45.116.14"/>
    </slice>
    <from sec="1284008492" usec="0"/>
    <to sec="1284008497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.109.184.14"/>
    </slice>
    <from sec="1284009191" usec="0"/>
    <to sec="1284009195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.77.97.15"/>
    </slice>
    <from sec="1284008957" usec="0"/>
    <to sec="1284008965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.87.3.16"/>
    </slice>
    <from sec="1284008714" usec="0"/>
    <to sec="1284008736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.13.163.16"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284008524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.33.230.16"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284008980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
3358[label="145.105.150.17;s;1299pkt 1299fpkt", shape=diamond, color=yellow];
9288[label="145.105.150.17;1402pkt 1402fpkt", shape=pentagon, color=darkviolet];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.150.17:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3358--9288[label="1;1299pkt 1299fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.150.17"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.214.17"/>
    </slice>
    <from sec="1284008945" usec="0"/>
    <to sec="1284008971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
2360[label="19.69.0.18;s;508pkt 508fpkt", shape=diamond, color=yellow];
9297[label="19.69.0.18;508pkt 508fpkt", shape=pentagon, color=darkviolet];
13688[label="19.69.0.18;507pkt 507fpkt", shape=invtriangle, color=brown];
16267[label="19.69.0.18;508pkt 508fpkt", shape=invhouse, color=bisque];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.69.0.18:*, *:139}[50%]&lt;BR/&gt;{19.69.0.18:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0123%)&lt;BR/&gt; 139: (24.9877%)&lt;BR/&gt; 41156: (0.0984737%)&lt;BR/&gt; 41150: (0.0984737%)&lt;BR/&gt; 41143: (0.0984737%)&gt;];
}
2360--9297[label="1;508pkt 508fpkt"];
2360--13688[label="1;507pkt 507fpkt"];
2360--16267[label="1;508pkt 508fpkt"];
9297--13688[label="1;507pkt 507fpkt"];
9297--16267[label="1;508pkt 508fpkt"];
13688--16267[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="19.69.0.18"/>
      <filter dst_port="139" src_ip="19.69.0.18"/>
    </slice>
    <from sec="1284008437" usec="0"/>
    <to sec="1284008664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.87.92.18"/>
    </slice>
    <from sec="1284009150" usec="0"/>
    <to sec="1284009291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.45.129.18"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.215.142.18"/>
    </slice>
    <from sec="1284009093" usec="0"/>
    <to sec="1284009123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.115.215.18"/>
    </slice>
    <from sec="1284008672" usec="0"/>
    <to sec="1284008686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.228.128.19"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284008646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
6547[label="221.80.160.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
9332[label="221.80.160.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.80.160.19:5041, 145.105.68.59:5041}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (100%)&gt;];
}
6547--9332[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.68.59" dst_port="5041" src_ip="221.80.160.19" src_port="5041"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.142.212.19"/>
    </slice>
    <from sec="1284009069" usec="0"/>
    <to sec="1284009096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.23.215.19"/>
    </slice>
    <from sec="1284009000" usec="0"/>
    <to sec="1284009014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
6442[label="64.102.4.20;s;27pkt 27fpkt", shape=diamond, color=yellow];
9342[label="64.102.4.20;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.102.4.20:80, 167.190.154.249:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50494: (1.85185%)&lt;BR/&gt; 50493: (1.85185%)&lt;BR/&gt; 50492: (1.85185%)&lt;BR/&gt; 50491: (1.85185%)&gt;];
}
6442--9342[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.154.249" src_ip="64.102.4.20" src_port="80"/>
    </slice>
    <from sec="1284009071" usec="0"/>
    <to sec="1284009182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.198.38.20"/>
    </slice>
    <from sec="1284008688" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.45.128.20"/>
    </slice>
    <from sec="1284009228" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
5204[label="199.56.56.105;d;157pkt 157fpkt", shape=diamond, color=yellow];
9359[label="42.228.194.20;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.56.56.105:63603}[59.2357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63603: (26.8786%)&lt;BR/&gt; 20129: (13.5838%)&lt;BR/&gt; 80: (12.4277%)&lt;BR/&gt; 0: (1.7341%)&lt;BR/&gt; 443: (0.867052%)&gt;];
}
5204--9359[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.105" dst_port="63603"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.228.128.21"/>
    </slice>
    <from sec="1284009180" usec="0"/>
    <to sec="1284009223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.217.217.21"/>
    </slice>
    <from sec="1284008852" usec="0"/>
    <to sec="1284008881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.42.238.21"/>
    </slice>
    <from sec="1284008878" usec="0"/>
    <to sec="1284008969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.80.1.22"/>
    </slice>
    <from sec="1284009175" usec="0"/>
    <to sec="1284009201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.89.24.22"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.77.22"/>
    </slice>
    <from sec="1284009275" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.60.46.23"/>
    </slice>
    <from sec="1284008794" usec="0"/>
    <to sec="1284008797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.94.163.23"/>
    </slice>
    <from sec="1284008559" usec="0"/>
    <to sec="1284008805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.91.24.24"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.214.24"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.124.20.25"/>
    </slice>
    <from sec="1284008820" usec="0"/>
    <to sec="1284008834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.35.36.25"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.46.47.25"/>
    </slice>
    <from sec="1284008815" usec="0"/>
    <to sec="1284008879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.47.157.25"/>
    </slice>
    <from sec="1284008812" usec="0"/>
    <to sec="1284008859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.198.196.25"/>
    </slice>
    <from sec="1284009169" usec="0"/>
    <to sec="1284009180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.215.199.25"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284008467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.85.163.26"/>
    </slice>
    <from sec="1284008952" usec="0"/>
    <to sec="1284008986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.226.26"/>
    </slice>
    <from sec="1284008513" usec="0"/>
    <to sec="1284008683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
5831[label="145.105.148.28;s;203pkt 203fpkt", shape=diamond, color=yellow];
9501[label="145.105.148.28;211pkt 211fpkt", shape=pentagon, color=darkviolet];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.148.28:0, *:0}[99.5261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5169%)&lt;BR/&gt; 6000: (0.241546%)&lt;BR/&gt; 3389: (0.241546%)&gt;];
}
5831--9501[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.148.28"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
5186[label="20.101.149.28;s;627pkt 627fpkt", shape=diamond, color=yellow];
9502[label="20.101.149.28;773pkt 773fpkt", shape=pentagon, color=darkviolet];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.101.149.28:2707, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2707: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5186--9502[label="0.998405;626pkt 626fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="20.101.149.28" src_port="2707"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.33.244.29"/>
    </slice>
    <from sec="1284009177" usec="0"/>
    <to sec="1284009188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.176.7.30"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.20.9.30"/>
    </slice>
    <from sec="1284008691" usec="0"/>
    <to sec="1284008730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.98.52.30"/>
    </slice>
    <from sec="1284008837" usec="0"/>
    <to sec="1284009101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.185.83.30"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.172.202.30"/>
    </slice>
    <from sec="1284008762" usec="0"/>
    <to sec="1284008861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.198.218.30"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.14.117.31"/>
    </slice>
    <from sec="1284008905" usec="0"/>
    <to sec="1284008941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.104.118.31"/>
    </slice>
    <from sec="1284009286" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.170.123.31"/>
    </slice>
    <from sec="1284009089" usec="0"/>
    <to sec="1284009103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
2658[label="145.105.148.31;s;555pkt 555fpkt", shape=diamond, color=yellow];
9552[label="145.105.148.31;559pkt 559fpkt", shape=pentagon, color=darkviolet];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.148.31:0, *:0}[99.6422%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6409%)&lt;BR/&gt; 6000: (0.0897666%)&lt;BR/&gt; 4899: (0.0897666%)&lt;BR/&gt; 3641: (0.0897666%)&lt;BR/&gt; 3389: (0.0897666%)&gt;];
}
2658--5607[label="0.0036036;2pkt 2fpkt"];
2658--9552[label="1;555pkt 555fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.148.31"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.122.213.31"/>
    </slice>
    <from sec="1284008947" usec="0"/>
    <to sec="1284009256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.83.218.31"/>
    </slice>
    <from sec="1284009189" usec="0"/>
    <to sec="1284009196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.13.7.32"/>
    </slice>
    <from sec="1284008513" usec="0"/>
    <to sec="1284008566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.60.133.32"/>
    </slice>
    <from sec="1284008487" usec="0"/>
    <to sec="1284008686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.116.80.33"/>
    </slice>
    <from sec="1284008886" usec="0"/>
    <to sec="1284008898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.52.140.33"/>
    </slice>
    <from sec="1284009189" usec="0"/>
    <to sec="1284009195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.144.33"/>
    </slice>
    <from sec="1284008729" usec="0"/>
    <to sec="1284008849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.25.54.34"/>
    </slice>
    <from sec="1284008761" usec="0"/>
    <to sec="1284008773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.32.56.34"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284008972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.93.154.34"/>
    </slice>
    <from sec="1284008955" usec="0"/>
    <to sec="1284008970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.13.0.35"/>
    </slice>
    <from sec="1284008971" usec="0"/>
    <to sec="1284009037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.100.36.35"/>
    </slice>
    <from sec="1284008909" usec="0"/>
    <to sec="1284008917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.43.106.35"/>
    </slice>
    <from sec="1284008706" usec="0"/>
    <to sec="1284008727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.75.186.35"/>
    </slice>
    <from sec="1284009056" usec="0"/>
    <to sec="1284009124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.139.41.36"/>
    </slice>
    <from sec="1284009135" usec="0"/>
    <to sec="1284009274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.178.60.36"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.236.117.36"/>
    </slice>
    <from sec="1284008736" usec="0"/>
    <to sec="1284008752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.42.158.36"/>
    </slice>
    <from sec="1284008681" usec="0"/>
    <to sec="1284008755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.122.217.36"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.50.228.36"/>
    </slice>
    <from sec="1284009174" usec="0"/>
    <to sec="1284009246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.125.232.36"/>
    </slice>
    <from sec="1284009088" usec="0"/>
    <to sec="1284009158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.13.0.37"/>
    </slice>
    <from sec="1284009094" usec="0"/>
    <to sec="1284009124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.174.151.37"/>
    </slice>
    <from sec="1284009070" usec="0"/>
    <to sec="1284009215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.6.1.38"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.237.188.38"/>
    </slice>
    <from sec="1284008798" usec="0"/>
    <to sec="1284008802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.90.45.39"/>
    </slice>
    <from sec="1284009150" usec="0"/>
    <to sec="1284009235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.33.54.39"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.56.62.39"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.16.87.39"/>
    </slice>
    <from sec="1284008749" usec="0"/>
    <to sec="1284008763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.203.212.39"/>
    </slice>
    <from sec="1284008717" usec="0"/>
    <to sec="1284008745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.168.55.40"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.160.99.40"/>
    </slice>
    <from sec="1284008912" usec="0"/>
    <to sec="1284008918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.32.114.40"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.87.12.41"/>
    </slice>
    <from sec="1284008928" usec="0"/>
    <to sec="1284008983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.64.54.41"/>
    </slice>
    <from sec="1284009246" usec="0"/>
    <to sec="1284009278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.144.41"/>
    </slice>
    <from sec="1284008762" usec="0"/>
    <to sec="1284008861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.13.165.41"/>
    </slice>
    <from sec="1284008549" usec="0"/>
    <to sec="1284008613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.12.174.41"/>
    </slice>
    <from sec="1284008832" usec="0"/>
    <to sec="1284008856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.144.42"/>
    </slice>
    <from sec="1284008970" usec="0"/>
    <to sec="1284008989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.84.208.42"/>
    </slice>
    <from sec="1284008917" usec="0"/>
    <to sec="1284009037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.132.237.42"/>
    </slice>
    <from sec="1284009109" usec="0"/>
    <to sec="1284009124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.245.37.43"/>
    </slice>
    <from sec="1284008425" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.152.165.43"/>
    </slice>
    <from sec="1284009164" usec="0"/>
    <to sec="1284009198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.164.188.43"/>
    </slice>
    <from sec="1284008641" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.192.213.43"/>
    </slice>
    <from sec="1284009178" usec="0"/>
    <to sec="1284009191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.162.61.44"/>
    </slice>
    <from sec="1284008802" usec="0"/>
    <to sec="1284008858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.60.130.44"/>
    </slice>
    <from sec="1284008472" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.42.196.44"/>
    </slice>
    <from sec="1284009039" usec="0"/>
    <to sec="1284009099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.17.202.44"/>
    </slice>
    <from sec="1284009189" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="122.136.247.44"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.99.45"/>
    </slice>
    <from sec="1284009069" usec="0"/>
    <to sec="1284009083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.70.134.45"/>
    </slice>
    <from sec="1284008581" usec="0"/>
    <to sec="1284008892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
6552[label="68.121.167.45;s;68pkt 68fpkt", shape=diamond, color=yellow];
9836[label="68.121.167.45;68pkt 68fpkt", shape=pentagon, color=darkviolet];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.121.167.45:*, 167.190.180.29:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2830: (0.735294%)&lt;BR/&gt; 2829: (0.735294%)&lt;BR/&gt; 2828: (0.735294%)&lt;BR/&gt; 2827: (0.735294%)&gt;];
}
6552--9836[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.29" dst_port="80" src_ip="68.121.167.45"/>
    </slice>
    <from sec="1284009216" usec="0"/>
    <to sec="1284009232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.13.0.46"/>
    </slice>
    <from sec="1284008862" usec="0"/>
    <to sec="1284009036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.166.92.46"/>
    </slice>
    <from sec="1284008704" usec="0"/>
    <to sec="1284008721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.40.149.46"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.42.236.46"/>
    </slice>
    <from sec="1284009027" usec="0"/>
    <to sec="1284009154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.139.35.48"/>
    </slice>
    <from sec="1284008932" usec="0"/>
    <to sec="1284008942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.40.73.48"/>
    </slice>
    <from sec="1284009039" usec="0"/>
    <to sec="1284009110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
4780[label="167.190.225.49;s;49pkt 49fpkt", shape=diamond, color=yellow];
9903[label="167.190.225.49;63pkt 63fpkt", shape=pentagon, color=darkviolet];
14043[label="167.190.225.49;63pkt 63fpkt", shape=invtriangle, color=brown];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.225.49:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64695: (0.857143%)&lt;BR/&gt; 62971: (0.857143%)&lt;BR/&gt; 62244: (0.857143%)&lt;BR/&gt; 61809: (0.857143%)&gt;];
}
4780--9903[label="1;49pkt 49fpkt"];
4780--14043[label="1;49pkt 49fpkt"];
9903--14043[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter src_ip="167.190.225.49" src_port="25"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.225.250.49"/>
    </slice>
    <from sec="1284009232" usec="0"/>
    <to sec="1284009241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.149.32.50"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284008963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.33.163.50"/>
    </slice>
    <from sec="1284008666" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.102.199.50"/>
    </slice>
    <from sec="1284008982" usec="0"/>
    <to sec="1284008989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.76.6.51"/>
    </slice>
    <from sec="1284008851" usec="0"/>
    <to sec="1284008857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.36.8.51"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.21.88.51"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
280[label="167.190.200.69;d;169pkt 169fpkt", shape=diamond, color=yellow];
1268[label="167.190.4.133;d;204pkt 204fpkt", shape=diamond, color=yellow];
2149[label="3.196.0.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
2610[label="42.41.145.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
2770[label="120.206.142.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
3214[label="170.219.104.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
3644[label="28.216.158.208;s;15pkt 15fpkt", shape=diamond, color=yellow];
4251[label="65.64.68.158;s;107pkt 107fpkt", shape=diamond, color=yellow];
4324[label="208.41.167.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
4328[label="28.216.158.217;s;27pkt 27fpkt", shape=diamond, color=yellow];
5041[label="36.23.250.26;s;4pkt 4fpkt", shape=diamond, color=yellow];
6011[label="64.111.112.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
7060[label="167.190.4.133;d;139pkt 139fpkt", shape=hexagon, color=black];
7755[label="167.190.200.69;d;165pkt 165fpkt", shape=hexagon, color=black];
8168[label="3.196.0.97;s;1pkt 1fpkt", shape=hexagon, color=black];
9476[label="36.23.250.26;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9938[label="64.111.112.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11901[label="65.64.68.158;131pkt 131fpkt", shape=pentagon, color=darkviolet];
12215[label="27.212.16.173;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12950[label="28.216.158.217;31pkt 31fpkt", shape=pentagon, color=darkviolet];
13228[label="120.206.142.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14063[label="64.111.112.51;1pkt 1fpkt", shape=invtriangle, color=brown];
15223[label="65.64.68.158;131pkt 131fpkt", shape=invtriangle, color=brown];
15830[label="28.216.158.217;31pkt 31fpkt", shape=invtriangle, color=brown];
15984[label="120.206.142.236;1pkt 1fpkt", shape=invtriangle, color=brown];
16507[label="64.111.112.51;1pkt 1fpkt", shape=invhouse, color=bisque];
17549[label="28.216.158.217;31pkt 31fpkt", shape=invhouse, color=bisque];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 167.190.4.133:*}[58.0645%]&lt;BR/&gt;{*:80, 167.190.200.69:*}[38.7097%]&lt;BR/&gt;{65.64.68.158:80, *:*}[32.5062%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6486%)&lt;BR/&gt; 9802: (1.2285%)&lt;BR/&gt; 2655: (0.28665%)&lt;BR/&gt; 4499: (0.2457%)&lt;BR/&gt; 4491: (0.2457%)&gt;];
}
280--2149[label="1;1pkt 1fpkt"];
280--2610[label="1;1pkt 1fpkt"];
280--2770[label="1;1pkt 1fpkt"];
280--3214[label="1;1pkt 1fpkt"];
280--4251[label="0.495327;53pkt 53fpkt"];
280--4324[label="1;1pkt 1fpkt"];
280--4328[label="0.888889;24pkt 24fpkt"];
280--7755[label="1;165pkt 165fpkt"];
280--8168[label="1;1pkt 1fpkt"];
280--11901[label="0.40458;53pkt 53fpkt"];
280--12215[label="0.2;4pkt 4fpkt"];
280--12950[label="0.774194;24pkt 24fpkt"];
280--13228[label="1;1pkt 1fpkt"];
280--15223[label="0.40458;53pkt 53fpkt"];
280--15830[label="0.774194;24pkt 24fpkt"];
280--15984[label="1;1pkt 1fpkt"];
280--17549[label="0.774194;24pkt 24fpkt"];
1268--3644[label="1;15pkt 15fpkt"];
1268--4251[label="0.504673;54pkt 54fpkt"];
1268--4328[label="0.111111;3pkt 3fpkt"];
1268--5041[label="1;4pkt 4fpkt"];
1268--6011[label="1;1pkt 1fpkt"];
1268--7060[label="1;139pkt 139fpkt"];
1268--9476[label="1;4pkt 4fpkt"];
1268--9938[label="1;1pkt 1fpkt"];
1268--11901[label="0.412214;54pkt 54fpkt"];
1268--12215[label="0.6;12pkt 12fpkt"];
1268--12950[label="0.16129;5pkt 5fpkt"];
1268--14063[label="1;1pkt 1fpkt"];
1268--15223[label="0.412214;54pkt 54fpkt"];
1268--15830[label="0.16129;5pkt 5fpkt"];
1268--16507[label="1;1pkt 1fpkt"];
1268--17549[label="0.16129;5pkt 5fpkt"];
2149--7755[label="1;1pkt 1fpkt"];
2149--8168[label="1;1pkt 1fpkt"];
2610--7755[label="1;1pkt 1fpkt"];
2770--7755[label="1;1pkt 1fpkt"];
2770--13228[label="1;1pkt 1fpkt"];
2770--15984[label="1;1pkt 1fpkt"];
3214--7755[label="1;1pkt 1fpkt"];
3644--7060[label="1;15pkt 15fpkt"];
4251--7060[label="0.504673;54pkt 54fpkt"];
4251--7755[label="0.495327;53pkt 53fpkt"];
4251--11901[label="1;107pkt 107fpkt"];
4251--15223[label="1;107pkt 107fpkt"];
4324--7755[label="1;1pkt 1fpkt"];
4328--7060[label="0.111111;3pkt 3fpkt"];
4328--7755[label="0.888889;24pkt 24fpkt"];
4328--12950[label="1;27pkt 27fpkt"];
4328--15830[label="1;27pkt 27fpkt"];
4328--17549[label="1;27pkt 27fpkt"];
5041--9476[label="1;4pkt 4fpkt"];
6011--9938[label="1;1pkt 1fpkt"];
6011--14063[label="1;1pkt 1fpkt"];
6011--16507[label="1;1pkt 1fpkt"];
7060--11901[label="0.412214;54pkt 54fpkt"];
7060--12215[label="0.6;12pkt 12fpkt"];
7060--12950[label="0.16129;5pkt 5fpkt"];
7060--15223[label="0.412214;54pkt 54fpkt"];
7060--15830[label="0.16129;5pkt 5fpkt"];
7060--17549[label="0.16129;5pkt 5fpkt"];
7755--8168[label="1;1pkt 1fpkt"];
7755--11901[label="0.40458;53pkt 53fpkt"];
7755--12215[label="0.2;4pkt 4fpkt"];
7755--12950[label="0.774194;24pkt 24fpkt"];
7755--13228[label="1;1pkt 1fpkt"];
7755--15223[label="0.40458;53pkt 53fpkt"];
7755--15830[label="0.774194;24pkt 24fpkt"];
7755--15984[label="1;1pkt 1fpkt"];
7755--17549[label="0.774194;24pkt 24fpkt"];
9938--14063[label="1;1pkt 1fpkt"];
9938--16507[label="1;1pkt 1fpkt"];
11901--15223[label="1;131pkt 131fpkt"];
12950--15830[label="1;31pkt 31fpkt"];
12950--17549[label="1;31pkt 31fpkt"];
13228--15984[label="1;1pkt 1fpkt"];
14063--16507[label="1;1pkt 1fpkt"];
15830--17549[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="65.64.68.158" src_port="80"/>
      <filter dst_ip="167.190.4.133" src_port="80"/>
      <filter dst_ip="167.190.200.69" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.21.26.52"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.5.27.52"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.4.39.53"/>
    </slice>
    <from sec="1284009162" usec="0"/>
    <to sec="1284009181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.68.80.53"/>
    </slice>
    <from sec="1284008764" usec="0"/>
    <to sec="1284008814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.12.90.53"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284009045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.37.54"/>
    </slice>
    <from sec="1284008793" usec="0"/>
    <to sec="1284008859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
2654[label="148.142.75.54;s;1026pkt 1026fpkt", shape=diamond, color=yellow];
3371[label="47.88.20.59;d;43pkt 43fpkt", shape=diamond, color=yellow];
3920[label="198.32.86.4;s;37pkt 37fpkt", shape=diamond, color=yellow];
9976[label="148.142.75.54;1198pkt 1198fpkt", shape=pentagon, color=darkviolet];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.142.75.54:0, *:0}[96.5323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.658%)&lt;BR/&gt; 22: (1.6276%)&lt;BR/&gt; 60718: (0.0434028%)&lt;BR/&gt; 60573: (0.0434028%)&lt;BR/&gt; 60429: (0.0434028%)&gt;];
}
2654--3371[label="0.0232558;1pkt 1fpkt"];
2654--4626[label="0.00268097;1pkt 1fpkt"];
2654--5180[label="0.00961538;1pkt 1fpkt"];
2654--8348[label="0.011236;1pkt 1fpkt"];
2654--9976[label="1;1026pkt 1026fpkt"];
3371--3920[label="1;37pkt 37fpkt"];
3371--9976[label="0.0232558;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.142.75.54"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.116.87.54"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284009015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.172.107.54"/>
    </slice>
    <from sec="1284009270" usec="0"/>
    <to sec="1284009274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.23.135.54"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284009106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
6344[label="174.147.156.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
9987[label="174.147.156.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14094[label="174.147.156.54;1pkt 1fpkt", shape=invtriangle, color=brown];
16529[label="174.147.156.54;1pkt 1fpkt", shape=invhouse, color=bisque];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.147.156.54:80, 198.32.104.161:51565}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51565: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6344--9987[label="1;1pkt 1fpkt"];
6344--14094[label="1;1pkt 1fpkt"];
6344--16529[label="1;1pkt 1fpkt"];
9987--14094[label="1;1pkt 1fpkt"];
9987--16529[label="1;1pkt 1fpkt"];
14094--16529[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.104.161" dst_port="51565" src_ip="174.147.156.54" src_port="80"/>
    </slice>
    <from sec="1284008698" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.110.158.54"/>
    </slice>
    <from sec="1284008547" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.135.212.54"/>
    </slice>
    <from sec="1284008852" usec="0"/>
    <to sec="1284008879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.166.183.55"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.35.188.55"/>
    </slice>
    <from sec="1284009285" usec="0"/>
    <to sec="1284009292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.179.3.56"/>
    </slice>
    <from sec="1284009081" usec="0"/>
    <to sec="1284009117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.17.4.56"/>
    </slice>
    <from sec="1284008964" usec="0"/>
    <to sec="1284009090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.139.71.57"/>
    </slice>
    <from sec="1284009177" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.205.81.57"/>
    </slice>
    <from sec="1284009065" usec="0"/>
    <to sec="1284009100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.133.28.58"/>
    </slice>
    <from sec="1284008409" usec="0"/>
    <to sec="1284009287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.52.135.58"/>
    </slice>
    <from sec="1284008956" usec="0"/>
    <to sec="1284008965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.4.42.59"/>
    </slice>
    <from sec="1284008951" usec="0"/>
    <to sec="1284008961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.82.69.59"/>
    </slice>
    <from sec="1284008758" usec="0"/>
    <to sec="1284008789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.1.170.59"/>
    </slice>
    <from sec="1284008453" usec="0"/>
    <to sec="1284009289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.195.237.59"/>
    </slice>
    <from sec="1284008857" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.130.81.62"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.15.134.62"/>
    </slice>
    <from sec="1284008956" usec="0"/>
    <to sec="1284008977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.83.224.62"/>
    </slice>
    <from sec="1284008628" usec="0"/>
    <to sec="1284008758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.196.0.63"/>
    </slice>
    <from sec="1284009235" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.93.63"/>
    </slice>
    <from sec="1284009006" usec="0"/>
    <to sec="1284009146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.54.54.64"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.74.80.64"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284008991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.70.109.64"/>
    </slice>
    <from sec="1284008837" usec="0"/>
    <to sec="1284008847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.110.117.64"/>
    </slice>
    <from sec="1284008710" usec="0"/>
    <to sec="1284008754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.11.161.64"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.128.243.64"/>
    </slice>
    <from sec="1284009225" usec="0"/>
    <to sec="1284009259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.5.100.65"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.81.144.65"/>
    </slice>
    <from sec="1284008414" usec="0"/>
    <to sec="1284009275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.224.86.66"/>
    </slice>
    <from sec="1284008799" usec="0"/>
    <to sec="1284008808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.40.176.66"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.40.184.66"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284009003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.235.185.66"/>
    </slice>
    <from sec="1284008858" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.150.188.66"/>
    </slice>
    <from sec="1284009286" usec="0"/>
    <to sec="1284009297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.90.209.66"/>
    </slice>
    <from sec="1284008935" usec="0"/>
    <to sec="1284009044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.86.67"/>
    </slice>
    <from sec="1284008904" usec="0"/>
    <to sec="1284008912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.91.76.68"/>
    </slice>
    <from sec="1284008732" usec="0"/>
    <to sec="1284008749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.85.163.68"/>
    </slice>
    <from sec="1284009234" usec="0"/>
    <to sec="1284009246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.82.168.68"/>
    </slice>
    <from sec="1284008670" usec="0"/>
    <to sec="1284008726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.222.47.69"/>
    </slice>
    <from sec="1284008602" usec="0"/>
    <to sec="1284008620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.252.52.69"/>
    </slice>
    <from sec="1284008972" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.143.58.69"/>
    </slice>
    <from sec="1284008903" usec="0"/>
    <to sec="1284008907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.26.107.69"/>
    </slice>
    <from sec="1284008854" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.80.195.69"/>
    </slice>
    <from sec="1284008780" usec="0"/>
    <to sec="1284008817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.36.223.69"/>
    </slice>
    <from sec="1284008932" usec="0"/>
    <to sec="1284008992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.223.249.69"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.173.185.70"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.247.65.71"/>
    </slice>
    <from sec="1284008453" usec="0"/>
    <to sec="1284009066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.132.77.72"/>
    </slice>
    <from sec="1284008422" usec="0"/>
    <to sec="1284008433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.138.236.72"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.70.91.73"/>
    </slice>
    <from sec="1284009037" usec="0"/>
    <to sec="1284009051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.146.95.73"/>
    </slice>
    <from sec="1284008585" usec="0"/>
    <to sec="1284008635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.130.133.73"/>
    </slice>
    <from sec="1284008913" usec="0"/>
    <to sec="1284009021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.35.108.74"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284009008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.208.196.74"/>
    </slice>
    <from sec="1284009015" usec="0"/>
    <to sec="1284009076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.48.26.75"/>
    </slice>
    <from sec="1284008875" usec="0"/>
    <to sec="1284008903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.138.115.75"/>
    </slice>
    <from sec="1284009121" usec="0"/>
    <to sec="1284009130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.144.75"/>
    </slice>
    <from sec="1284009032" usec="0"/>
    <to sec="1284009145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.173.185.75"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.255.92.76"/>
    </slice>
    <from sec="1284008839" usec="0"/>
    <to sec="1284008848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.157.102.76"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.4.164.76"/>
    </slice>
    <from sec="1284008983" usec="0"/>
    <to sec="1284009028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.8.187.76"/>
    </slice>
    <from sec="1284008636" usec="0"/>
    <to sec="1284009246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.8.44.77"/>
    </slice>
    <from sec="1284008748" usec="0"/>
    <to sec="1284008766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.74.68.77"/>
    </slice>
    <from sec="1284008781" usec="0"/>
    <to sec="1284008791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.16.74.77"/>
    </slice>
    <from sec="1284008709" usec="0"/>
    <to sec="1284008714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.45.128.77"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.240.159.77"/>
    </slice>
    <from sec="1284009079" usec="0"/>
    <to sec="1284009123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.138.10.78"/>
    </slice>
    <from sec="1284008905" usec="0"/>
    <to sec="1284008962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.96.138.78"/>
    </slice>
    <from sec="1284009119" usec="0"/>
    <to sec="1284009122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.24.144.78"/>
    </slice>
    <from sec="1284008411" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
560[label="199.56.48.176;d;253pkt 253fpkt", shape=diamond, color=yellow];
3304[label="199.41.20.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
5631[label="29.43.179.151;s;1pkt 1fpkt", shape=diamond, color=yellow];
6650[label="199.56.48.176;d;146pkt 146fpkt", shape=hexagon, color=black];
8942[label="198.124.29.1;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8960[label="198.124.29.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9009[label="198.124.29.4;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9033[label="20.162.43.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9295[label="26.153.245.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9309[label="23.246.171.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9492[label="199.98.247.27;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9559[label="199.98.247.31;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9616[label="20.162.21.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9740[label="29.42.111.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9765[label="9.43.169.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10037[label="65.229.160.56;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10126[label="65.229.160.62;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10465[label="199.41.20.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10527[label="29.42.255.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11306[label="65.229.161.124;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11324[label="65.229.161.125;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11458[label="199.98.250.132;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11800[label="29.43.179.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11912[label="29.45.208.158;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11932[label="29.44.20.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12071[label="29.64.217.165;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12130[label="29.40.36.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12224[label="29.42.161.173;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12453[label="65.229.161.187;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12636[label="27.171.28.198;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12904[label="23.245.251.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13308[label="29.45.128.241;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13501[label="198.124.29.1;4pkt 4fpkt", shape=invtriangle, color=brown];
13508[label="198.124.29.2;4pkt 4fpkt", shape=invtriangle, color=brown];
13530[label="198.124.29.4;3pkt 3fpkt", shape=invtriangle, color=brown];
13687[label="26.153.245.17;1pkt 1fpkt", shape=invtriangle, color=brown];
13805[label="199.98.247.27;2pkt 2fpkt", shape=invtriangle, color=brown];
13841[label="199.98.247.31;2pkt 2fpkt", shape=invtriangle, color=brown];
13950[label="29.42.111.41;1pkt 1fpkt", shape=invtriangle, color=brown];
13968[label="9.43.169.42;1pkt 1fpkt", shape=invtriangle, color=brown];
14119[label="65.229.160.56;4pkt 4fpkt", shape=invtriangle, color=brown];
14403[label="29.42.255.81;1pkt 1fpkt", shape=invtriangle, color=brown];
14867[label="65.229.161.124;3pkt 3fpkt", shape=invtriangle, color=brown];
15166[label="29.43.179.151;1pkt 1fpkt", shape=invtriangle, color=brown];
15227[label="29.45.208.158;2pkt 2fpkt", shape=invtriangle, color=brown];
15240[label="29.44.20.160;1pkt 1fpkt", shape=invtriangle, color=brown];
15359[label="29.40.36.169;1pkt 1fpkt", shape=invtriangle, color=brown];
15807[label="23.245.251.214;1pkt 1fpkt", shape=invtriangle, color=brown];
16266[label="26.153.245.17;1pkt 1fpkt", shape=invhouse, color=bisque];
16376[label="20.162.21.35;1pkt 1fpkt", shape=invhouse, color=bisque];
16430[label="29.42.111.41;1pkt 1fpkt", shape=invhouse, color=bisque];
16440[label="9.43.169.42;1pkt 1fpkt", shape=invhouse, color=bisque];
16540[label="65.229.160.56;4pkt 4fpkt", shape=invhouse, color=bisque];
16725[label="29.42.255.81;1pkt 1fpkt", shape=invhouse, color=bisque];
17176[label="29.43.179.151;1pkt 1fpkt", shape=invhouse, color=bisque];
17285[label="29.40.36.169;1pkt 1fpkt", shape=invhouse, color=bisque];
17531[label="23.245.251.214;1pkt 1fpkt", shape=invhouse, color=bisque];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.56.48.176:80}[93.3824%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7082%)&lt;BR/&gt; 42936: (0.77821%)&lt;BR/&gt; 42923: (0.583658%)&lt;BR/&gt; 47353: (0.486381%)&lt;BR/&gt; 43370: (0.486381%)&gt;];
}
560--3179[label="0.166667;1pkt 1fpkt"];
560--3304[label="1;1pkt 1fpkt"];
560--3866[label="0.00395257;1pkt 1fpkt"];
560--5631[label="1;1pkt 1fpkt"];
560--6650[label="1;146pkt 146fpkt"];
560--8884[label="0.0237154;6pkt 6fpkt"];
560--8894[label="0.12253;31pkt 31fpkt"];
560--8902[label="0.0750988;19pkt 19fpkt"];
560--8909[label="0.0790514;20pkt 20fpkt"];
560--8942[label="0.5;2pkt 2fpkt"];
560--8960[label="0.666667;2pkt 2fpkt"];
560--9009[label="0.666667;2pkt 2fpkt"];
560--9033[label="1;2pkt 2fpkt"];
560--9295[label="1;2pkt 2fpkt"];
560--9309[label="0.5;1pkt 1fpkt"];
560--9492[label="0.333333;1pkt 1fpkt"];
560--9559[label="1;2pkt 2fpkt"];
560--9616[label="1;1pkt 1fpkt"];
560--9740[label="1;1pkt 1fpkt"];
560--9765[label="1;1pkt 1fpkt"];
560--10037[label="0.5;2pkt 2fpkt"];
560--10126[label="0.666667;2pkt 2fpkt"];
560--10465[label="1;1pkt 1fpkt"];
560--10527[label="1;1pkt 1fpkt"];
560--11306[label="0.666667;2pkt 2fpkt"];
560--11324[label="0.875;7pkt 7fpkt"];
560--11458[label="1;3pkt 3fpkt"];
560--11800[label="1;1pkt 1fpkt"];
560--11912[label="0.5;1pkt 1fpkt"];
560--11932[label="1;1pkt 1fpkt"];
560--12071[label="0.75;3pkt 3fpkt"];
560--12130[label="1;1pkt 1fpkt"];
560--12224[label="0.5;1pkt 1fpkt"];
560--12453[label="0.5;2pkt 2fpkt"];
560--12518[label="0.666667;2pkt 2fpkt"];
560--12636[label="0.75;3pkt 3fpkt"];
560--12904[label="1;1pkt 1fpkt"];
560--13129[label="0.00395257;1pkt 1fpkt"];
560--13308[label="0.5;1pkt 1fpkt"];
560--13501[label="0.5;2pkt 2fpkt"];
560--13508[label="0.75;3pkt 3fpkt"];
560--13530[label="0.666667;2pkt 2fpkt"];
560--13687[label="1;1pkt 1fpkt"];
560--13841[label="1;2pkt 2fpkt"];
560--13950[label="1;1pkt 1fpkt"];
560--13968[label="1;1pkt 1fpkt"];
560--14119[label="0.5;2pkt 2fpkt"];
560--14403[label="1;1pkt 1fpkt"];
560--14867[label="0.666667;2pkt 2fpkt"];
560--15166[label="1;1pkt 1fpkt"];
560--15227[label="0.5;1pkt 1fpkt"];
560--15240[label="1;1pkt 1fpkt"];
560--15359[label="1;1pkt 1fpkt"];
560--15584[label="0.666667;2pkt 2fpkt"];
560--15807[label="1;1pkt 1fpkt"];
560--16266[label="1;1pkt 1fpkt"];
560--16376[label="1;1pkt 1fpkt"];
560--16430[label="1;1pkt 1fpkt"];
560--16440[label="1;1pkt 1fpkt"];
560--16540[label="0.5;2pkt 2fpkt"];
560--16725[label="1;1pkt 1fpkt"];
560--17176[label="1;1pkt 1fpkt"];
560--17285[label="1;1pkt 1fpkt"];
560--17407[label="0.666667;2pkt 2fpkt"];
560--17531[label="1;1pkt 1fpkt"];
3304--6650[label="1;1pkt 1fpkt"];
3304--8894[label="1;1pkt 1fpkt"];
3304--10465[label="1;1pkt 1fpkt"];
5631--11800[label="1;1pkt 1fpkt"];
5631--15166[label="1;1pkt 1fpkt"];
5631--17176[label="1;1pkt 1fpkt"];
6650--8884[label="0.0410959;6pkt 6fpkt"];
6650--8894[label="0.212329;31pkt 31fpkt"];
6650--8902[label="0.0136986;2pkt 2fpkt"];
6650--8909[label="0.00684932;1pkt 1fpkt"];
6650--8942[label="0.25;1pkt 1fpkt"];
6650--8960[label="0.333333;1pkt 1fpkt"];
6650--9009[label="0.666667;2pkt 2fpkt"];
6650--9033[label="0.5;1pkt 1fpkt"];
6650--9295[label="0.5;1pkt 1fpkt"];
6650--9309[label="0.5;1pkt 1fpkt"];
6650--9492[label="0.333333;1pkt 1fpkt"];
6650--9559[label="0.5;1pkt 1fpkt"];
6650--10037[label="0.5;2pkt 2fpkt"];
6650--10126[label="0.666667;2pkt 2fpkt"];
6650--10465[label="1;1pkt 1fpkt"];
6650--11306[label="0.666667;2pkt 2fpkt"];
6650--11324[label="0.5;4pkt 4fpkt"];
6650--11458[label="0.666667;2pkt 2fpkt"];
6650--11932[label="1;1pkt 1fpkt"];
6650--12071[label="0.5;2pkt 2fpkt"];
6650--12636[label="0.25;1pkt 1fpkt"];
6650--13129[label="0.00684932;1pkt 1fpkt"];
6650--13308[label="0.5;1pkt 1fpkt"];
6650--13501[label="0.25;1pkt 1fpkt"];
6650--13508[label="0.5;2pkt 2fpkt"];
6650--13530[label="0.666667;2pkt 2fpkt"];
6650--13841[label="0.5;1pkt 1fpkt"];
6650--14119[label="0.5;2pkt 2fpkt"];
6650--14867[label="0.666667;2pkt 2fpkt"];
6650--15240[label="1;1pkt 1fpkt"];
6650--16540[label="0.5;2pkt 2fpkt"];
8942--13501[label="1;4pkt 4fpkt"];
8960--13508[label="1;3pkt 3fpkt"];
9009--13530[label="1;3pkt 3fpkt"];
9295--13687[label="1;1pkt 1fpkt"];
9295--16266[label="1;1pkt 1fpkt"];
9492--13805[label="1;2pkt 2fpkt"];
9559--13841[label="1;2pkt 2fpkt"];
9616--16376[label="1;1pkt 1fpkt"];
9740--13950[label="1;1pkt 1fpkt"];
9740--16430[label="1;1pkt 1fpkt"];
9765--13968[label="1;1pkt 1fpkt"];
9765--16440[label="1;1pkt 1fpkt"];
10037--14119[label="1;4pkt 4fpkt"];
10037--16540[label="1;4pkt 4fpkt"];
10527--14403[label="1;1pkt 1fpkt"];
10527--16725[label="1;1pkt 1fpkt"];
11306--14867[label="1;3pkt 3fpkt"];
11800--15166[label="1;1pkt 1fpkt"];
11800--17176[label="1;1pkt 1fpkt"];
11912--15227[label="1;2pkt 2fpkt"];
11932--15240[label="1;1pkt 1fpkt"];
12130--15359[label="1;1pkt 1fpkt"];
12130--17285[label="1;1pkt 1fpkt"];
12904--15807[label="1;1pkt 1fpkt"];
12904--17531[label="1;1pkt 1fpkt"];
13687--16266[label="1;1pkt 1fpkt"];
13950--16430[label="1;1pkt 1fpkt"];
13968--16440[label="1;1pkt 1fpkt"];
14119--16540[label="1;4pkt 4fpkt"];
14403--16725[label="1;1pkt 1fpkt"];
15166--17176[label="1;1pkt 1fpkt"];
15359--17285[label="1;1pkt 1fpkt"];
15807--17531[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.176" dst_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.78.21.79"/>
    </slice>
    <from sec="1284009130" usec="0"/>
    <to sec="1284009148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.8.28.79"/>
    </slice>
    <from sec="1284009050" usec="0"/>
    <to sec="1284009154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
6548[label="221.31.88.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
10497[label="221.31.88.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14386[label="221.31.88.80;1pkt 1fpkt", shape=invtriangle, color=brown];
16715[label="221.31.88.80;1pkt 1fpkt", shape=invhouse, color=bisque];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.31.88.80:5041, 145.105.68.59:5041}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (100%)&gt;];
}
6548--10497[label="1;1pkt 1fpkt"];
6548--14386[label="1;1pkt 1fpkt"];
6548--16715[label="1;1pkt 1fpkt"];
10497--14386[label="1;1pkt 1fpkt"];
10497--16715[label="1;1pkt 1fpkt"];
14386--16715[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.68.59" dst_port="5041" src_ip="221.31.88.80" src_port="5041"/>
    </slice>
    <from sec="1284009205" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
989[label="209.78.133.208;d;227pkt 227fpkt", shape=diamond, color=yellow];
2745[label="167.190.66.130;s;232pkt 232fpkt", shape=diamond, color=yellow];
7619[label="209.78.133.208;d;104pkt 104fpkt", shape=hexagon, color=black];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.66.130:*, 209.78.133.208:443}[88.3268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.8455%)&lt;BR/&gt; 80: (0.79929%)&lt;BR/&gt; 3714: (0.26643%)&lt;BR/&gt; 3713: (0.26643%)&lt;BR/&gt; 3712: (0.26643%)&gt;];
}
989--2745[label="0.889868;202pkt 202fpkt"];
989--7619[label="1;104pkt 104fpkt"];
2745--4739[label="0.0135135;2pkt 2fpkt"];
2745--5409[label="0.0123457;2pkt 2fpkt"];
2745--6653[label="0.00921659;2pkt 2fpkt"];
2745--6787[label="0.00980392;2pkt 2fpkt"];
2745--6898[label="0.0163043;3pkt 3fpkt"];
2745--7619[label="1;104pkt 104fpkt"];
2745--7673[label="0.0179641;3pkt 3fpkt"];
2745--8413[label="0.0185185;2pkt 2fpkt"];
2745--8902[label="0.012931;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.78.133.208" dst_port="443" src_ip="167.190.66.130"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.129.14.81"/>
    </slice>
    <from sec="1284009242" usec="0"/>
    <to sec="1284009251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.45.129.81"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
10534[label="25.3.54.82;244pkt 244fpkt", shape=pentagon, color=darkviolet];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.3.54.82:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
</description>
    <slice>
      <filter dst_port="5060" src_ip="25.3.54.82" src_port="5060"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.65.129.82"/>
    </slice>
    <from sec="1284009208" usec="0"/>
    <to sec="1284009244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.81.197.82"/>
    </slice>
    <from sec="1284008930" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.54.201.82"/>
    </slice>
    <from sec="1284009252" usec="0"/>
    <to sec="1284009266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.61.145.83"/>
    </slice>
    <from sec="1284008950" usec="0"/>
    <to sec="1284008955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.251.203.83"/>
    </slice>
    <from sec="1284008867" usec="0"/>
    <to sec="1284008874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.141.18.85"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.90.96.85"/>
    </slice>
    <from sec="1284008571" usec="0"/>
    <to sec="1284008590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.206.208.85"/>
    </slice>
    <from sec="1284009070" usec="0"/>
    <to sec="1284009087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.147.63.86"/>
    </slice>
    <from sec="1284009005" usec="0"/>
    <to sec="1284009030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.17.199.86"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.130.217.86"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.96.56.88"/>
    </slice>
    <from sec="1284009241" usec="0"/>
    <to sec="1284009245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.91.65.89"/>
    </slice>
    <from sec="1284008982" usec="0"/>
    <to sec="1284008993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.35.149.92"/>
    </slice>
    <from sec="1284009062" usec="0"/>
    <to sec="1284009219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.237.108.93"/>
    </slice>
    <from sec="1284009254" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.19.135.93"/>
    </slice>
    <from sec="1284008857" usec="0"/>
    <to sec="1284008902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.35.166.93"/>
    </slice>
    <from sec="1284008420" usec="0"/>
    <to sec="1284008901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.144.177.93"/>
    </slice>
    <from sec="1284009048" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.67.175.94"/>
    </slice>
    <from sec="1284009270" usec="0"/>
    <to sec="1284009291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.65.95"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.16.136.95"/>
    </slice>
    <from sec="1284008879" usec="0"/>
    <to sec="1284008921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
848[label="145.105.146.95;s;624pkt 624fpkt", shape=diamond, color=yellow];
10774[label="145.105.146.95;1238pkt 1238fpkt", shape=pentagon, color=darkviolet];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.146.95:25, *:*}[99.5961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.7852%)&lt;BR/&gt; 0: (0.37594%)&lt;BR/&gt; 2896: (0.161117%)&lt;BR/&gt; 65233: (0.107411%)&lt;BR/&gt; 4149: (0.107411%)&gt;];
}
848--5607[label="0.00160256;1pkt 1fpkt"];
848--10774[label="1;624pkt 624fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.146.95" src_port="25"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.86.96"/>
    </slice>
    <from sec="1284009119" usec="0"/>
    <to sec="1284009133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.145.103.96"/>
    </slice>
    <from sec="1284008409" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.112.112.96"/>
    </slice>
    <from sec="1284009040" usec="0"/>
    <to sec="1284009082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.113.191.96"/>
    </slice>
    <from sec="1284008419" usec="0"/>
    <to sec="1284009289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.196.0.97"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.145.103.97"/>
    </slice>
    <from sec="1284008410" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.166.161.97"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284009079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.62.1.98"/>
    </slice>
    <from sec="1284008934" usec="0"/>
    <to sec="1284008946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.16.230.98"/>
    </slice>
    <from sec="1284008414" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.192.241.98"/>
    </slice>
    <from sec="1284008645" usec="0"/>
    <to sec="1284009277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.103.15.99"/>
    </slice>
    <from sec="1284008433" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
5586[label="137.5.118.99;s;3pkt 3fpkt", shape=diamond, color=yellow];
10859[label="137.5.118.99;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14606[label="137.5.118.99;4pkt 4fpkt", shape=invtriangle, color=brown];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.5.118.99:1551, 192.168.1.1:53867}[25%]&lt;BR/&gt;{137.5.118.99:5041, 26.247.98.58:5041}[25%]&lt;BR/&gt;{137.5.118.99:5041, 217.108.173.120:1047}[25%]&lt;BR/&gt;{137.5.118.99:5041, 65.56.30.155:5041}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (68.1818%)&lt;BR/&gt; 1047: (13.6364%)&lt;BR/&gt; 53867: (9.09091%)&lt;BR/&gt; 1551: (9.09091%)&gt;];
}
5586--10859[label="1;3pkt 3fpkt"];
5586--14606[label="1;3pkt 3fpkt"];
10859--14606[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="65.56.30.155" dst_port="5041" src_ip="137.5.118.99" src_port="5041"/>
      <filter dst_ip="217.108.173.120" dst_port="1047" src_ip="137.5.118.99" src_port="5041"/>
      <filter dst_ip="26.247.98.58" dst_port="5041" src_ip="137.5.118.99" src_port="5041"/>
      <filter dst_ip="192.168.1.1" dst_port="53867" src_ip="137.5.118.99" src_port="1551"/>
    </slice>
    <from sec="1284008636" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.208.209.99"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284009252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.56.56.100"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.73.100"/>
    </slice>
    <from sec="1284009125" usec="0"/>
    <to sec="1284009216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.140.178.100"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.21.213.100"/>
    </slice>
    <from sec="1284009247" usec="0"/>
    <to sec="1284009271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.47.12.101"/>
    </slice>
    <from sec="1284008941" usec="0"/>
    <to sec="1284008985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.35.17.101"/>
    </slice>
    <from sec="1284009073" usec="0"/>
    <to sec="1284009109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.1.171.101"/>
    </slice>
    <from sec="1284008557" usec="0"/>
    <to sec="1284009256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.33.171.101"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.145.103.102"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.160.247.102"/>
    </slice>
    <from sec="1284008778" usec="0"/>
    <to sec="1284008836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.4.33.104"/>
    </slice>
    <from sec="1284009217" usec="0"/>
    <to sec="1284009230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.222.97.104"/>
    </slice>
    <from sec="1284008500" usec="0"/>
    <to sec="1284008512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.94.18.105"/>
    </slice>
    <from sec="1284008744" usec="0"/>
    <to sec="1284008818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.152.92.105"/>
    </slice>
    <from sec="1284008835" usec="0"/>
    <to sec="1284008867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.107.223.105"/>
    </slice>
    <from sec="1284009147" usec="0"/>
    <to sec="1284009161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.145.103.106"/>
    </slice>
    <from sec="1284008411" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.29.166.106"/>
    </slice>
    <from sec="1284008510" usec="0"/>
    <to sec="1284008513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.90.183.107"/>
    </slice>
    <from sec="1284008954" usec="0"/>
    <to sec="1284008970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.27.187.107"/>
    </slice>
    <from sec="1284008443" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.42.197.107"/>
    </slice>
    <from sec="1284008499" usec="0"/>
    <to sec="1284008574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.17.148.108"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.178.156.108"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.46.200.108"/>
    </slice>
    <from sec="1284009136" usec="0"/>
    <to sec="1284009202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.227.36.109"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284008435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.45.129.109"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.144.109"/>
    </slice>
    <from sec="1284008710" usec="0"/>
    <to sec="1284008767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.173.188.110"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.69.51.111"/>
    </slice>
    <from sec="1284008466" usec="0"/>
    <to sec="1284008470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.26.246.111"/>
    </slice>
    <from sec="1284008410" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.74.58.112"/>
    </slice>
    <from sec="1284008998" usec="0"/>
    <to sec="1284009004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.211.78.112"/>
    </slice>
    <from sec="1284009138" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.205.79.112"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.41.133.112"/>
    </slice>
    <from sec="1284008822" usec="0"/>
    <to sec="1284008845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.14.44.113"/>
    </slice>
    <from sec="1284008723" usec="0"/>
    <to sec="1284008960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
4248[label="199.56.56.113;s;41pkt 41fpkt", shape=diamond, color=yellow];
11114[label="199.56.56.113;42pkt 42fpkt", shape=pentagon, color=darkviolet];
14760[label="199.56.56.113;42pkt 42fpkt", shape=invtriangle, color=brown];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.56.113:2000, *:*}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (19.2%)&lt;BR/&gt; 22284: (6%)&lt;BR/&gt; 23078: (4.8%)&lt;BR/&gt; 10497: (3.6%)&lt;BR/&gt; 5523: (3.6%)&gt;];
}
4248--11114[label="1;41pkt 41fpkt"];
4248--14760[label="1;41pkt 41fpkt"];
11114--14760[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="199.56.56.113" src_port="2000"/>
    </slice>
    <from sec="1284008428" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.83.101.113"/>
    </slice>
    <from sec="1284009224" usec="0"/>
    <to sec="1284009233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.108.115.113"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.92.180.113"/>
    </slice>
    <from sec="1284008484" usec="0"/>
    <to sec="1284008565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
1235[label="148.36.35.114;s;293pkt 293fpkt", shape=diamond, color=yellow];
3056[label="221.205.42.103;d;47pkt 47fpkt", shape=diamond, color=yellow];
3496[label="2.146.35.173;d;6pkt 6fpkt", shape=diamond, color=yellow];
8407[label="2.146.35.173;d;6pkt 6fpkt", shape=hexagon, color=black];
11135[label="148.36.35.114;297pkt 297fpkt", shape=pentagon, color=darkviolet];
14772[label="148.36.35.114;297pkt 297fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.35.114:443, *:*}[50.8361%]&lt;BR/&gt;{148.36.35.114:993, *:*}[41.1371%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (26.5328%)&lt;BR/&gt; 993: (20.0846%)&lt;BR/&gt; 143: (1.58562%)&lt;BR/&gt; 995: (1.32135%)&lt;BR/&gt; 53342: (0.369979%)&gt;];
}
1235--3056[label="0.978723;46pkt 46fpkt"];
1235--3496[label="0.833333;5pkt 5fpkt"];
1235--5607[label="0.00341297;1pkt 1fpkt"];
1235--8407[label="0.833333;5pkt 5fpkt"];
1235--11135[label="1;293pkt 293fpkt"];
1235--14772[label="1;293pkt 293fpkt"];
3056--11135[label="0.978723;46pkt 46fpkt"];
3056--14772[label="0.978723;46pkt 46fpkt"];
3496--8407[label="1;6pkt 6fpkt"];
3496--11135[label="0.833333;5pkt 5fpkt"];
3496--14772[label="0.833333;5pkt 5fpkt"];
8407--11135[label="0.833333;5pkt 5fpkt"];
8407--14772[label="0.833333;5pkt 5fpkt"];
11135--14772[label="1;297pkt 297fpkt"];
</description>
    <slice>
      <filter src_ip="148.36.35.114" src_port="443"/>
      <filter src_ip="148.36.35.114" src_port="993"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.219.125.114"/>
    </slice>
    <from sec="1284008872" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.102.116.115"/>
    </slice>
    <from sec="1284008716" usec="0"/>
    <to sec="1284008730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.94.18.117"/>
    </slice>
    <from sec="1284009091" usec="0"/>
    <to sec="1284009170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.94.21.117"/>
    </slice>
    <from sec="1284009223" usec="0"/>
    <to sec="1284009237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
2316[label="33.73.181.225;d;11pkt 11fpkt", shape=diamond, color=yellow];
3242[label="131.60.55.117;s;2pkt 2fpkt", shape=diamond, color=yellow];
6109[label="148.52.54.49;s;3pkt 3fpkt", shape=diamond, color=yellow];
7709[label="33.73.181.225;d;9pkt 9fpkt", shape=hexagon, color=black];
9889[label="148.52.54.49;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11182[label="131.60.55.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14794[label="131.60.55.117;2pkt 2fpkt", shape=invtriangle, color=brown];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.54.49:80, 33.73.181.225:*}[50%]&lt;BR/&gt;{167.190.71.192:80, 33.73.181.225:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63013: (6.75676%)&lt;BR/&gt; 58731: (6.75676%)&lt;BR/&gt; 57660: (4.05405%)&lt;BR/&gt; 55363: (4.05405%)&gt;];
}
2316--3242[label="1;2pkt 2fpkt"];
2316--7709[label="1;9pkt 9fpkt"];
2316--9889[label="0.625;5pkt 5fpkt"];
2316--11182[label="1;2pkt 2fpkt"];
2316--14794[label="1;2pkt 2fpkt"];
3242--7709[label="1;2pkt 2fpkt"];
3242--11182[label="1;2pkt 2fpkt"];
3242--14794[label="1;2pkt 2fpkt"];
6109--9889[label="1;3pkt 3fpkt"];
7709--9889[label="0.5;4pkt 4fpkt"];
7709--11182[label="1;2pkt 2fpkt"];
7709--14794[label="1;2pkt 2fpkt"];
11182--14794[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.181.225" src_ip="148.52.54.49" src_port="80"/>
      <filter dst_ip="33.73.181.225" src_ip="167.190.71.192" src_port="80"/>
    </slice>
    <from sec="1284008420" usec="0"/>
    <to sec="1284009164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.77.117"/>
    </slice>
    <from sec="1284009124" usec="0"/>
    <to sec="1284009143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.224.107.117"/>
    </slice>
    <from sec="1284009059" usec="0"/>
    <to sec="1284009095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.198.197.118"/>
    </slice>
    <from sec="1284008848" usec="0"/>
    <to sec="1284008888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.48.87.120"/>
    </slice>
    <from sec="1284008717" usec="0"/>
    <to sec="1284008746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.105.153.120"/>
    </slice>
    <from sec="1284009224" usec="0"/>
    <to sec="1284009260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.216.233.120"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.251.243.120"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.89.121"/>
    </slice>
    <from sec="1284009244" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.121.130.121"/>
    </slice>
    <from sec="1284008748" usec="0"/>
    <to sec="1284008766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.155.202.121"/>
    </slice>
    <from sec="1284008531" usec="0"/>
    <to sec="1284008541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.51.150.122"/>
    </slice>
    <from sec="1284008698" usec="0"/>
    <to sec="1284008728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.91.181.122"/>
    </slice>
    <from sec="1284008719" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.99.196.122"/>
    </slice>
    <from sec="1284009287" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.0.40.123"/>
    </slice>
    <from sec="1284008952" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
6057[label="211.86.51.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
11299[label="211.86.51.124;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14861[label="211.86.51.124;2pkt 2fpkt", shape=invtriangle, color=brown];
16993[label="211.86.51.124;2pkt 2fpkt", shape=invhouse, color=bisque];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.86.51.124:80, 167.190.154.249:47187}[50%]&lt;BR/&gt;{211.86.51.124:80, 167.190.154.249:59150}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59150: (28.5714%)&lt;BR/&gt; 47187: (21.4286%)&gt;];
}
6057--11299[label="1;1pkt 1fpkt"];
6057--14861[label="1;1pkt 1fpkt"];
6057--16993[label="1;1pkt 1fpkt"];
11299--14861[label="1;2pkt 2fpkt"];
11299--16993[label="1;2pkt 2fpkt"];
14861--16993[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.154.249" dst_port="59150" src_ip="211.86.51.124" src_port="80"/>
      <filter dst_ip="167.190.154.249" dst_port="47187" src_ip="211.86.51.124" src_port="80"/>
    </slice>
    <from sec="1284009040" usec="0"/>
    <to sec="1284009232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.83.101.124"/>
    </slice>
    <from sec="1284009217" usec="0"/>
    <to sec="1284009224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.70.230.124"/>
    </slice>
    <from sec="1284008928" usec="0"/>
    <to sec="1284008968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.235.112.125"/>
    </slice>
    <from sec="1284009181" usec="0"/>
    <to sec="1284009202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.240.227.125"/>
    </slice>
    <from sec="1284008445" usec="0"/>
    <to sec="1284009288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.144.5.126"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284009008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.24.14.126"/>
    </slice>
    <from sec="1284008502" usec="0"/>
    <to sec="1284008542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.40.120.127"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.81.149.127"/>
    </slice>
    <from sec="1284008999" usec="0"/>
    <to sec="1284009001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.214.216.127"/>
    </slice>
    <from sec="1284008950" usec="0"/>
    <to sec="1284009247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.238.127"/>
    </slice>
    <from sec="1284008644" usec="0"/>
    <to sec="1284009290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.179.238.127"/>
    </slice>
    <from sec="1284009114" usec="0"/>
    <to sec="1284009129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.23.36.128"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284008999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
6414[label="198.45.138.58;d;10pkt 10fpkt", shape=diamond, color=yellow];
6415[label="194.210.137.128;s;2pkt 2fpkt", shape=diamond, color=yellow];
6554[label="40.35.17.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
10415[label="33.104.177.76;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10830[label="40.35.17.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11374[label="194.210.137.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14342[label="33.104.177.76;2pkt 2fpkt", shape=invtriangle, color=brown];
14904[label="194.210.137.128;2pkt 2fpkt", shape=invtriangle, color=brown];
16686[label="33.104.177.76;2pkt 2fpkt", shape=invhouse, color=bisque];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 198.45.138.58:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3453: (8.33333%)&lt;BR/&gt; 3443: (8.33333%)&lt;BR/&gt; 3439: (8.33333%)&lt;BR/&gt; 3515: (6.25%)&gt;];
}
6414--6415[label="1;2pkt 2fpkt"];
6414--6554[label="1;1pkt 1fpkt"];
6414--10415[label="0.5;1pkt 1fpkt"];
6414--10830[label="1;1pkt 1fpkt"];
6414--11374[label="1;2pkt 2fpkt"];
6414--12338[label="0.5;1pkt 1fpkt"];
6414--14342[label="0.5;1pkt 1fpkt"];
6414--14904[label="1;2pkt 2fpkt"];
6414--16686[label="0.5;1pkt 1fpkt"];
6415--11374[label="1;2pkt 2fpkt"];
6415--14904[label="1;2pkt 2fpkt"];
6554--10830[label="1;1pkt 1fpkt"];
10415--14342[label="1;2pkt 2fpkt"];
10415--16686[label="1;2pkt 2fpkt"];
11374--14904[label="1;2pkt 2fpkt"];
14342--16686[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.138.58" src_port="80"/>
    </slice>
    <from sec="1284008720" usec="0"/>
    <to sec="1284009255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.152.18.129"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.203.145.129"/>
    </slice>
    <from sec="1284008850" usec="0"/>
    <to sec="1284009062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.18.243.130"/>
    </slice>
    <from sec="1284008646" usec="0"/>
    <to sec="1284008678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.150.10.131"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.20.84.131"/>
    </slice>
    <from sec="1284009231" usec="0"/>
    <to sec="1284009255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.178.87.131"/>
    </slice>
    <from sec="1284009279" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.159.88.131"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.48.133"/>
    </slice>
    <from sec="1284008967" usec="0"/>
    <to sec="1284008999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.251.60.134"/>
    </slice>
    <from sec="1284009005" usec="0"/>
    <to sec="1284009033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.82.148.134"/>
    </slice>
    <from sec="1284008751" usec="0"/>
    <to sec="1284008765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.174.241.134"/>
    </slice>
    <from sec="1284008426" usec="0"/>
    <to sec="1284008944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.91.140.135"/>
    </slice>
    <from sec="1284009175" usec="0"/>
    <to sec="1284009187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.62.78.136"/>
    </slice>
    <from sec="1284009035" usec="0"/>
    <to sec="1284009048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.42.134.136"/>
    </slice>
    <from sec="1284008853" usec="0"/>
    <to sec="1284008889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.105.142.136"/>
    </slice>
    <from sec="1284009263" usec="0"/>
    <to sec="1284009275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
294[label="167.190.108.202;d;310pkt 310fpkt", shape=diamond, color=yellow];
323[label="145.105.42.232;d;1863pkt 1863fpkt", shape=diamond, color=yellow];
959[label="29.118.87.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
1263[label="17.139.150.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
1737[label="65.215.161.127;s;2pkt 2fpkt", shape=diamond, color=yellow];
1806[label="217.0.186.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
1959[label="68.16.97.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
2651[label="218.149.201.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
3696[label="26.240.4.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
3717[label="65.72.206.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
3734[label="221.126.106.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
3789[label="8.177.160.36;s;8pkt 8fpkt", shape=diamond, color=yellow];
3877[label="169.160.162.5;s;10pkt 10fpkt", shape=diamond, color=yellow];
4898[label="9.120.234.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
5337[label="21.68.40.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
5563[label="19.101.192.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
5777[label="29.208.2.163;s;2pkt 2fpkt", shape=diamond, color=yellow];
5879[label="65.72.206.193;s;10pkt 10fpkt", shape=diamond, color=yellow];
5962[label="218.196.34.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
6047[label="217.9.89.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
6287[label="183.103.15.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
6331[label="26.3.40.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
6370[label="26.130.240.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
6599[label="145.105.42.232;d;285pkt 285fpkt", shape=hexagon, color=black];
7001[label="68.16.97.35;s;1pkt 1fpkt", shape=hexagon, color=black];
7758[label="167.190.108.202;d;197pkt 197fpkt", shape=hexagon, color=black];
8652[label="26.130.240.111;s;1pkt 1fpkt", shape=hexagon, color=black];
8923[label="220.23.36.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9623[label="68.16.97.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9706[label="217.0.186.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10384[label="22.232.53.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11154[label="21.66.125.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11160[label="26.48.181.115;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11177[label="199.168.184.116;41pkt 41fpkt", shape=pentagon, color=darkviolet];
11242[label="216.80.110.120;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11352[label="65.215.161.127;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11543[label="26.240.4.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12098[label="65.83.171.167;24pkt 24fpkt", shape=pentagon, color=darkviolet];
12509[label="221.20.39.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12512[label="217.9.89.191;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12513[label="26.40.129.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12550[label="65.72.206.193;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12616[label="26.3.40.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12653[label="22.194.104.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12689[label="65.72.206.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12980[label="218.149.201.219;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13032[label="18.10.119.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13132[label="221.126.106.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13933[label="217.0.186.39;1pkt 1fpkt", shape=invtriangle, color=brown];
14324[label="22.232.53.75;1pkt 1fpkt", shape=invtriangle, color=brown];
14780[label="21.66.125.115;1pkt 1fpkt", shape=invtriangle, color=brown];
15004[label="26.240.4.138;1pkt 1fpkt", shape=invtriangle, color=brown];
15579[label="217.9.89.191;2pkt 2fpkt", shape=invtriangle, color=brown];
15580[label="26.40.129.191;1pkt 1fpkt", shape=invtriangle, color=brown];
15603[label="65.72.206.193;12pkt 12fpkt", shape=invtriangle, color=brown];
15666[label="22.194.104.199;1pkt 1fpkt", shape=invtriangle, color=brown];
15875[label="18.10.119.223;1pkt 1fpkt", shape=invtriangle, color=brown];
16673[label="22.232.53.75;1pkt 1fpkt", shape=invhouse, color=bisque];
16952[label="21.66.125.115;1pkt 1fpkt", shape=invhouse, color=bisque];
17078[label="26.240.4.138;1pkt 1fpkt", shape=invhouse, color=bisque];
17404[label="26.40.129.191;1pkt 1fpkt", shape=invhouse, color=bisque];
17421[label="65.72.206.193;12pkt 12fpkt", shape=invhouse, color=bisque];
17461[label="22.194.104.199;1pkt 1fpkt", shape=invhouse, color=bisque];
17579[label="18.10.119.223;1pkt 1fpkt", shape=invhouse, color=bisque];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.105.42.232:12533}[52.5913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12533: (22.4835%)&lt;BR/&gt; 80: (8.4117%)&lt;BR/&gt; 5041: (7.33194%)&lt;BR/&gt; 29919: (2.92581%)&lt;BR/&gt; 59966: (0.97527%)&gt;];
}
294--402[label="0.0116279;1pkt 1fpkt"];
294--2031[label="0.0129032;4pkt 4fpkt"];
294--2080[label="0.00337838;1pkt 1fpkt"];
294--2651[label="1;1pkt 1fpkt"];
294--3696[label="1;1pkt 1fpkt"];
294--3717[label="1;1pkt 1fpkt"];
294--3734[label="1;1pkt 1fpkt"];
294--4053[label="0.0178571;1pkt 1fpkt"];
294--4266[label="0.333333;1pkt 1fpkt"];
294--4898[label="1;1pkt 1fpkt"];
294--5879[label="0.2;2pkt 2fpkt"];
294--5962[label="1;1pkt 1fpkt"];
294--6047[label="1;1pkt 1fpkt"];
294--7758[label="1;197pkt 197fpkt"];
294--8923[label="1;1pkt 1fpkt"];
294--10384[label="1;1pkt 1fpkt"];
294--10838[label="0.00327869;1pkt 1fpkt"];
294--11154[label="1;1pkt 1fpkt"];
294--11242[label="1;2pkt 2fpkt"];
294--11543[label="1;1pkt 1fpkt"];
294--12509[label="1;1pkt 1fpkt"];
294--12512[label="1;2pkt 2fpkt"];
294--12513[label="1;1pkt 1fpkt"];
294--12550[label="0.166667;2pkt 2fpkt"];
294--12653[label="1;1pkt 1fpkt"];
294--12689[label="1;1pkt 1fpkt"];
294--12980[label="0.833333;5pkt 5fpkt"];
294--13032[label="1;1pkt 1fpkt"];
294--13132[label="1;1pkt 1fpkt"];
294--14324[label="1;1pkt 1fpkt"];
294--14590[label="0.00327869;1pkt 1fpkt"];
294--14780[label="1;1pkt 1fpkt"];
294--15004[label="1;1pkt 1fpkt"];
294--15579[label="1;2pkt 2fpkt"];
294--15580[label="1;1pkt 1fpkt"];
294--15603[label="0.166667;2pkt 2fpkt"];
294--15666[label="1;1pkt 1fpkt"];
294--15875[label="1;1pkt 1fpkt"];
294--16673[label="1;1pkt 1fpkt"];
294--16842[label="0.00327869;1pkt 1fpkt"];
294--16952[label="1;1pkt 1fpkt"];
294--17078[label="1;1pkt 1fpkt"];
294--17404[label="1;1pkt 1fpkt"];
294--17421[label="0.166667;2pkt 2fpkt"];
294--17461[label="1;1pkt 1fpkt"];
294--17579[label="1;1pkt 1fpkt"];
323--959[label="1;1pkt 1fpkt"];
323--1263[label="1;1pkt 1fpkt"];
323--1737[label="1;2pkt 2fpkt"];
323--1806[label="1;1pkt 1fpkt"];
323--1959[label="1;1pkt 1fpkt"];
323--3789[label="1;8pkt 8fpkt"];
323--3877[label="1;10pkt 10fpkt"];
323--4007[label="0.00546448;1pkt 1fpkt"];
323--4190[label="0.0463576;7pkt 7fpkt"];
323--4831[label="0.00813008;1pkt 1fpkt"];
323--5112[label="0.000536769;1pkt 1fpkt"];
323--5337[label="1;1pkt 1fpkt"];
323--5563[label="1;1pkt 1fpkt"];
323--5777[label="1;2pkt 2fpkt"];
323--5879[label="0.8;8pkt 8fpkt"];
323--5952[label="0.0526316;1pkt 1fpkt"];
323--6287[label="1;1pkt 1fpkt"];
323--6331[label="1;1pkt 1fpkt"];
323--6370[label="1;1pkt 1fpkt"];
323--6599[label="1;285pkt 285fpkt"];
323--7001[label="1;1pkt 1fpkt"];
323--8589[label="0.000536769;1pkt 1fpkt"];
323--8652[label="1;1pkt 1fpkt"];
323--8872[label="0.000536769;1pkt 1fpkt"];
323--9039[label="0.00431034;1pkt 1fpkt"];
323--9515[label="0.000536769;1pkt 1fpkt"];
323--9623[label="1;1pkt 1fpkt"];
323--9706[label="1;1pkt 1fpkt"];
323--10039[label="0.0662983;12pkt 12fpkt"];
323--11019[label="0.0909091;2pkt 2fpkt"];
323--11160[label="1;25pkt 25fpkt"];
323--11177[label="0.0487805;2pkt 2fpkt"];
323--11352[label="1;2pkt 2fpkt"];
323--11999[label="0.00465116;1pkt 1fpkt"];
323--12098[label="0.833333;20pkt 20fpkt"];
323--12550[label="0.666667;8pkt 8fpkt"];
323--12616[label="1;1pkt 1fpkt"];
323--13815[label="0.000536769;1pkt 1fpkt"];
323--13933[label="1;1pkt 1fpkt"];
323--14704[label="0.0909091;2pkt 2fpkt"];
323--15603[label="0.666667;8pkt 8fpkt"];
323--16344[label="0.000536769;1pkt 1fpkt"];
323--17421[label="0.666667;8pkt 8fpkt"];
959--6599[label="1;1pkt 1fpkt"];
1263--6599[label="1;1pkt 1fpkt"];
1737--6599[label="1;2pkt 2fpkt"];
1737--11352[label="1;2pkt 2fpkt"];
1806--6599[label="1;1pkt 1fpkt"];
1806--9706[label="1;1pkt 1fpkt"];
1806--13933[label="1;1pkt 1fpkt"];
1959--6599[label="1;1pkt 1fpkt"];
1959--7001[label="1;1pkt 1fpkt"];
1959--9623[label="1;1pkt 1fpkt"];
2651--12980[label="1;1pkt 1fpkt"];
3696--7758[label="1;1pkt 1fpkt"];
3696--11543[label="1;1pkt 1fpkt"];
3696--15004[label="1;1pkt 1fpkt"];
3696--17078[label="1;1pkt 1fpkt"];
3717--7758[label="1;1pkt 1fpkt"];
3717--12689[label="1;1pkt 1fpkt"];
3734--7758[label="1;1pkt 1fpkt"];
3734--13132[label="1;1pkt 1fpkt"];
4898--7758[label="1;1pkt 1fpkt"];
5337--6599[label="1;1pkt 1fpkt"];
5777--6599[label="1;2pkt 2fpkt"];
5879--7758[label="0.2;2pkt 2fpkt"];
5879--12550[label="1;10pkt 10fpkt"];
5879--15603[label="1;10pkt 10fpkt"];
5879--17421[label="1;10pkt 10fpkt"];
5962--7758[label="1;1pkt 1fpkt"];
6047--12512[label="1;1pkt 1fpkt"];
6047--15579[label="1;1pkt 1fpkt"];
6287--6599[label="1;1pkt 1fpkt"];
6331--6599[label="1;1pkt 1fpkt"];
6331--12616[label="1;1pkt 1fpkt"];
6370--8652[label="1;1pkt 1fpkt"];
6599--7001[label="1;1pkt 1fpkt"];
6599--9623[label="1;1pkt 1fpkt"];
6599--9706[label="1;1pkt 1fpkt"];
6599--11019[label="0.0454545;1pkt 1fpkt"];
6599--11160[label="0.04;1pkt 1fpkt"];
6599--11177[label="0.0243902;1pkt 1fpkt"];
6599--11352[label="1;2pkt 2fpkt"];
6599--12098[label="0.0416667;1pkt 1fpkt"];
6599--12616[label="1;1pkt 1fpkt"];
6599--13933[label="1;1pkt 1fpkt"];
6599--14704[label="0.0454545;1pkt 1fpkt"];
7001--9623[label="1;1pkt 1fpkt"];
7758--11154[label="1;1pkt 1fpkt"];
7758--11242[label="0.5;1pkt 1fpkt"];
7758--11543[label="1;1pkt 1fpkt"];
7758--12509[label="1;1pkt 1fpkt"];
7758--12512[label="0.5;1pkt 1fpkt"];
7758--12513[label="1;1pkt 1fpkt"];
7758--12550[label="0.166667;2pkt 2fpkt"];
7758--12653[label="1;1pkt 1fpkt"];
7758--12689[label="1;1pkt 1fpkt"];
7758--12980[label="0.666667;4pkt 4fpkt"];
7758--13032[label="1;1pkt 1fpkt"];
7758--13132[label="1;1pkt 1fpkt"];
7758--14780[label="1;1pkt 1fpkt"];
7758--15004[label="1;1pkt 1fpkt"];
7758--15579[label="0.5;1pkt 1fpkt"];
7758--15580[label="1;1pkt 1fpkt"];
7758--15603[label="0.166667;2pkt 2fpkt"];
7758--15666[label="1;1pkt 1fpkt"];
7758--15875[label="1;1pkt 1fpkt"];
7758--16952[label="1;1pkt 1fpkt"];
7758--17078[label="1;1pkt 1fpkt"];
7758--17404[label="1;1pkt 1fpkt"];
7758--17421[label="0.166667;2pkt 2fpkt"];
7758--17461[label="1;1pkt 1fpkt"];
7758--17579[label="1;1pkt 1fpkt"];
9706--13933[label="1;1pkt 1fpkt"];
10384--14324[label="1;1pkt 1fpkt"];
10384--16673[label="1;1pkt 1fpkt"];
11154--14780[label="1;1pkt 1fpkt"];
11154--16952[label="1;1pkt 1fpkt"];
11543--15004[label="1;1pkt 1fpkt"];
11543--17078[label="1;1pkt 1fpkt"];
12512--15579[label="1;2pkt 2fpkt"];
12513--15580[label="1;1pkt 1fpkt"];
12513--17404[label="1;1pkt 1fpkt"];
12550--15603[label="1;12pkt 12fpkt"];
12550--17421[label="1;12pkt 12fpkt"];
12653--15666[label="1;1pkt 1fpkt"];
12653--17461[label="1;1pkt 1fpkt"];
13032--15875[label="1;1pkt 1fpkt"];
13032--17579[label="1;1pkt 1fpkt"];
14324--16673[label="1;1pkt 1fpkt"];
14780--16952[label="1;1pkt 1fpkt"];
15004--17078[label="1;1pkt 1fpkt"];
15580--17404[label="1;1pkt 1fpkt"];
15603--17421[label="1;12pkt 12fpkt"];
15666--17461[label="1;1pkt 1fpkt"];
15875--17579[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.42.232" dst_port="12533"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.68.52.138"/>
    </slice>
    <from sec="1284008744" usec="0"/>
    <to sec="1284008755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.153.99.138"/>
    </slice>
    <from sec="1284008600" usec="0"/>
    <to sec="1284008644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.59.116.138"/>
    </slice>
    <from sec="1284008853" usec="0"/>
    <to sec="1284008889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.43.168.138"/>
    </slice>
    <from sec="1284008832" usec="0"/>
    <to sec="1284008836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.83.87.140"/>
    </slice>
    <from sec="1284008737" usec="0"/>
    <to sec="1284008742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.168.168.141"/>
    </slice>
    <from sec="1284008886" usec="0"/>
    <to sec="1284008900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.102.116.142"/>
    </slice>
    <from sec="1284008675" usec="0"/>
    <to sec="1284008680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.116.228.142"/>
    </slice>
    <from sec="1284009000" usec="0"/>
    <to sec="1284009012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.145.22.143"/>
    </slice>
    <from sec="1284008802" usec="0"/>
    <to sec="1284008812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.68.10.144"/>
    </slice>
    <from sec="1284008831" usec="0"/>
    <to sec="1284008844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.115.144"/>
    </slice>
    <from sec="1284008551" usec="0"/>
    <to sec="1284008727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.68.116.144"/>
    </slice>
    <from sec="1284008871" usec="0"/>
    <to sec="1284008883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.86.133.144"/>
    </slice>
    <from sec="1284009205" usec="0"/>
    <to sec="1284009213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.80.153.144"/>
    </slice>
    <from sec="1284008862" usec="0"/>
    <to sec="1284008867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.218.144"/>
    </slice>
    <from sec="1284009029" usec="0"/>
    <to sec="1284009058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.77.28.145"/>
    </slice>
    <from sec="1284008443" usec="0"/>
    <to sec="1284008454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.62.46.145"/>
    </slice>
    <from sec="1284009229" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.19.96.145"/>
    </slice>
    <from sec="1284008795" usec="0"/>
    <to sec="1284008809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.217.131.145"/>
    </slice>
    <from sec="1284008678" usec="0"/>
    <to sec="1284008717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.200.206.145"/>
    </slice>
    <from sec="1284008726" usec="0"/>
    <to sec="1284008771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.136.52.146"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284008991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.248.84.146"/>
    </slice>
    <from sec="1284008794" usec="0"/>
    <to sec="1284008797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.173.148.146"/>
    </slice>
    <from sec="1284009013" usec="0"/>
    <to sec="1284009024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.146.169.146"/>
    </slice>
    <from sec="1284008778" usec="0"/>
    <to sec="1284008806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.80.199.146"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.15.69.147"/>
    </slice>
    <from sec="1284008750" usec="0"/>
    <to sec="1284008769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.44.136.147"/>
    </slice>
    <from sec="1284008906" usec="0"/>
    <to sec="1284008911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.84.8.148"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.65.92.148"/>
    </slice>
    <from sec="1284008787" usec="0"/>
    <to sec="1284008809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.41.137.148"/>
    </slice>
    <from sec="1284008875" usec="0"/>
    <to sec="1284008904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.137.186.148"/>
    </slice>
    <from sec="1284008951" usec="0"/>
    <to sec="1284008966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.190.8.149"/>
    </slice>
    <from sec="1284008769" usec="0"/>
    <to sec="1284008771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.224.33.149"/>
    </slice>
    <from sec="1284008849" usec="0"/>
    <to sec="1284008857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.43.38.149"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284009001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.64.87.149"/>
    </slice>
    <from sec="1284009211" usec="0"/>
    <to sec="1284009239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.144.149"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284008966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.178.15.151"/>
    </slice>
    <from sec="1284008545" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.88.39.151"/>
    </slice>
    <from sec="1284009025" usec="0"/>
    <to sec="1284009030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.243.43.151"/>
    </slice>
    <from sec="1284009242" usec="0"/>
    <to sec="1284009253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.169.64.151"/>
    </slice>
    <from sec="1284008921" usec="0"/>
    <to sec="1284008939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.36.193.151"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.49.200.151"/>
    </slice>
    <from sec="1284008828" usec="0"/>
    <to sec="1284008867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.187.116.152"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.169.140.152"/>
    </slice>
    <from sec="1284009182" usec="0"/>
    <to sec="1284009187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.80.199.152"/>
    </slice>
    <from sec="1284008412" usec="0"/>
    <to sec="1284009226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.43.208.152"/>
    </slice>
    <from sec="1284008940" usec="0"/>
    <to sec="1284008980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.24.169.153"/>
    </slice>
    <from sec="1284009248" usec="0"/>
    <to sec="1284009269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.52.21.154"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.158.200.154"/>
    </slice>
    <from sec="1284008947" usec="0"/>
    <to sec="1284008980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.86.84.155"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284008423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.60.130.155"/>
    </slice>
    <from sec="1284008564" usec="0"/>
    <to sec="1284008911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.144.155"/>
    </slice>
    <from sec="1284008630" usec="0"/>
    <to sec="1284008713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.131.5.156"/>
    </slice>
    <from sec="1284008415" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.106.16.156"/>
    </slice>
    <from sec="1284008929" usec="0"/>
    <to sec="1284008932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.238.180.156"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.212.137.157"/>
    </slice>
    <from sec="1284008637" usec="0"/>
    <to sec="1284008654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.4.112.158"/>
    </slice>
    <from sec="1284009293" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.126.132.158"/>
    </slice>
    <from sec="1284008424" usec="0"/>
    <to sec="1284008524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.247.22.159"/>
    </slice>
    <from sec="1284008971" usec="0"/>
    <to sec="1284009029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.14.64.159"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.86.237.159"/>
    </slice>
    <from sec="1284008967" usec="0"/>
    <to sec="1284009005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.143.174.160"/>
    </slice>
    <from sec="1284008413" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.93.218.160"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.130.13.161"/>
    </slice>
    <from sec="1284009260" usec="0"/>
    <to sec="1284009274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.192.147.161"/>
    </slice>
    <from sec="1284008615" usec="0"/>
    <to sec="1284009273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.116.16.162"/>
    </slice>
    <from sec="1284008563" usec="0"/>
    <to sec="1284008581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
6505[label="167.190.9.208;d;39pkt 39fpkt", shape=diamond, color=yellow];
11992[label="190.32.102.162;8pkt 8fpkt", shape=pentagon, color=darkviolet];
15279[label="190.32.102.162;8pkt 8fpkt", shape=invtriangle, color=brown];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.33.54.106:80, 167.190.9.208:*}[58.9744%]&lt;BR/&gt;{190.32.102.162:80, 167.190.9.208:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64819: (2.72727%)&lt;BR/&gt; 64818: (2.72727%)&lt;BR/&gt; 64813: (2.72727%)&lt;BR/&gt; 64812: (2.72727%)&gt;];
}
6505--11992[label="1;8pkt 8fpkt"];
6505--15279[label="1;8pkt 8fpkt"];
11992--15279[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.9.208" src_ip="198.33.54.106" src_port="80"/>
      <filter dst_ip="167.190.9.208" src_ip="190.32.102.162" src_port="80"/>
    </slice>
    <from sec="1284009143" usec="0"/>
    <to sec="1284009214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.193.155.162"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284008518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.45.93.163"/>
    </slice>
    <from sec="1284008732" usec="0"/>
    <to sec="1284008788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.94.227.163"/>
    </slice>
    <from sec="1284009253" usec="0"/>
    <to sec="1284009266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.46.29.164"/>
    </slice>
    <from sec="1284008977" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
6461[label="145.105.253.88;s;36pkt 36fpkt", shape=diamond, color=yellow];
10662[label="145.105.253.88;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.253.88:*, *:80}[62.1622%]&lt;BR/&gt;{145.105.253.88:*, 146.161.182.218:*}[35.1351%]&lt;BR/&gt;{145.105.253.88:*, *:443}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.5068%)&lt;BR/&gt; 443: (15.7534%)&lt;BR/&gt; 0: (2.73973%)&lt;BR/&gt; 4899: (1.36986%)&lt;BR/&gt; 3954: (1.36986%)&gt;];
}
6461--8909[label="0.0277778;1pkt 1fpkt"];
6461--10662[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="146.161.182.218" src_ip="145.105.253.88"/>
      <filter dst_port="80" src_ip="145.105.253.88"/>
      <filter dst_port="443" src_ip="145.105.253.88"/>
    </slice>
    <from sec="1284009091" usec="0"/>
    <to sec="1284009283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.44.142.164"/>
    </slice>
    <from sec="1284008673" usec="0"/>
    <to sec="1284008706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.175.197.164"/>
    </slice>
    <from sec="1284008953" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.35.165"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.67.92.165"/>
    </slice>
    <from sec="1284008778" usec="0"/>
    <to sec="1284008791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.75.94.166"/>
    </slice>
    <from sec="1284008860" usec="0"/>
    <to sec="1284008868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.36.208.166"/>
    </slice>
    <from sec="1284009231" usec="0"/>
    <to sec="1284009260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.2.230.166"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284008530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.41.179.167"/>
    </slice>
    <from sec="1284008709" usec="0"/>
    <to sec="1284008751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.164.181.167"/>
    </slice>
    <from sec="1284008439" usec="0"/>
    <to sec="1284008469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.40.77.168"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.191.102.168"/>
    </slice>
    <from sec="1284008579" usec="0"/>
    <to sec="1284008801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.104.141.168"/>
    </slice>
    <from sec="1284009141" usec="0"/>
    <to sec="1284009149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.68.88.169"/>
    </slice>
    <from sec="1284009237" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.217.106.169"/>
    </slice>
    <from sec="1284008805" usec="0"/>
    <to sec="1284008831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.158.169"/>
    </slice>
    <from sec="1284008973" usec="0"/>
    <to sec="1284009059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.60.217.169"/>
    </slice>
    <from sec="1284008806" usec="0"/>
    <to sec="1284008855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.199.7.170"/>
    </slice>
    <from sec="1284008464" usec="0"/>
    <to sec="1284008470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.232.194.170"/>
    </slice>
    <from sec="1284008740" usec="0"/>
    <to sec="1284008777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.151.16.171"/>
    </slice>
    <from sec="1284009171" usec="0"/>
    <to sec="1284009214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.238.144.171"/>
    </slice>
    <from sec="1284008758" usec="0"/>
    <to sec="1284008766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.17.146.171"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.219.194.171"/>
    </slice>
    <from sec="1284008716" usec="0"/>
    <to sec="1284009147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.88.33.172"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.148.146.172"/>
    </slice>
    <from sec="1284008941" usec="0"/>
    <to sec="1284008983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.39.173"/>
    </slice>
    <from sec="1284009274" usec="0"/>
    <to sec="1284009280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.40.148.173"/>
    </slice>
    <from sec="1284008942" usec="0"/>
    <to sec="1284008981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.14.138.174"/>
    </slice>
    <from sec="1284008854" usec="0"/>
    <to sec="1284008868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.212.174"/>
    </slice>
    <from sec="1284008964" usec="0"/>
    <to sec="1284008978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.88.136.175"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284008983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.181.175"/>
    </slice>
    <from sec="1284008990" usec="0"/>
    <to sec="1284009006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.180.0.176"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284008966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
1879[label="221.124.4.176;s;2392pkt 2392fpkt", shape=diamond, color=yellow];
12257[label="221.124.4.176;2609pkt 2609fpkt", shape=pentagon, color=darkviolet];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.124.4.176:1271, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1271: (50%)&gt;];
}
1879--2109[label="0.0125;1pkt 1fpkt"];
1879--12257[label="1;2392pkt 2392fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="221.124.4.176" src_port="1271"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.51.16.176"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.7.70.176"/>
    </slice>
    <from sec="1284008558" usec="0"/>
    <to sec="1284008684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.60.161.176"/>
    </slice>
    <from sec="1284009280" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.40.178.176"/>
    </slice>
    <from sec="1284008925" usec="0"/>
    <to sec="1284008964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.33.4.177"/>
    </slice>
    <from sec="1284008882" usec="0"/>
    <to sec="1284009166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.97.48.177"/>
    </slice>
    <from sec="1284008702" usec="0"/>
    <to sec="1284008720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.188.134.177"/>
    </slice>
    <from sec="1284008636" usec="0"/>
    <to sec="1284008708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.70.241.177"/>
    </slice>
    <from sec="1284008619" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.72.178.178"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.109.217.178"/>
    </slice>
    <from sec="1284009264" usec="0"/>
    <to sec="1284009281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
915[label="167.190.180.100;d;4734pkt 4734fpkt", shape=diamond, color=yellow];
957[label="167.190.180.107;d;297pkt 297fpkt", shape=diamond, color=yellow];
1129[label="199.56.62.48;d;314pkt 314fpkt", shape=diamond, color=yellow];
1216[label="209.160.67.136;s;2pkt 2fpkt", shape=diamond, color=yellow];
1436[label="203.55.41.184;s;17pkt 17fpkt", shape=diamond, color=yellow];
1577[label="8.238.211.75;s;14pkt 14fpkt", shape=diamond, color=yellow];
1647[label="161.249.255.17;s;7pkt 7fpkt", shape=diamond, color=yellow];
2395[label="161.249.255.19;s;31pkt 31fpkt", shape=diamond, color=yellow];
2478[label="22.130.16.240;s;13pkt 13fpkt", shape=diamond, color=yellow];
2522[label="29.111.196.170;s;30pkt 30fpkt", shape=diamond, color=yellow];
2583[label="21.225.34.178;s;13pkt 13fpkt", shape=diamond, color=yellow];
2591[label="16.75.164.172;s;14pkt 14fpkt", shape=diamond, color=yellow];
2892[label="32.13.116.133;s;228pkt 228fpkt", shape=diamond, color=yellow];
3049[label="203.55.41.162;s;44pkt 44fpkt", shape=diamond, color=yellow];
3116[label="27.181.12.203;s;18pkt 18fpkt", shape=diamond, color=yellow];
3276[label="220.160.74.14;s;27pkt 27fpkt", shape=diamond, color=yellow];
4325[label="69.68.4.204;s;26pkt 26fpkt", shape=diamond, color=yellow];
4380[label="161.249.255.83;s;26pkt 26fpkt", shape=diamond, color=yellow];
4561[label="21.227.32.185;s;15pkt 15fpkt", shape=diamond, color=yellow];
5163[label="203.55.41.185;s;77pkt 77fpkt", shape=diamond, color=yellow];
5330[label="32.13.117.58;s;46pkt 46fpkt", shape=diamond, color=yellow];
5514[label="21.225.10.56;s;28pkt 28fpkt", shape=diamond, color=yellow];
5964[label="198.33.207.55;s;57pkt 57fpkt", shape=diamond, color=yellow];
6086[label="17.136.141.17;s;30pkt 30fpkt", shape=diamond, color=yellow];
6087[label="167.190.225.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
6138[label="2.46.24.192;s;14pkt 14fpkt", shape=diamond, color=yellow];
6450[label="25.106.104.86;s;12pkt 12fpkt", shape=diamond, color=yellow];
6508[label="28.48.42.222;s;34pkt 34fpkt", shape=diamond, color=yellow];
6723[label="167.190.180.107;d;163pkt 163fpkt", shape=hexagon, color=black];
6762[label="199.56.62.48;d;314pkt 314fpkt", shape=hexagon, color=black];
7611[label="167.190.180.100;d;3164pkt 3164fpkt", shape=hexagon, color=black];
8233[label="161.249.255.19;s;15pkt 15fpkt", shape=hexagon, color=black];
8617[label="32.13.117.58;s;42pkt 42fpkt", shape=hexagon, color=black];
8961[label="22.131.32.2;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8983[label="28.48.236.2;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9019[label="69.68.117.4;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9024[label="217.104.162.4;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9034[label="209.160.67.5;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9065[label="218.104.165.6;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9083[label="198.134.229.7;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9097[label="9.64.97.8;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9182[label="221.114.42.12;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9193[label="28.49.180.12;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9215[label="9.115.210.13;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9244[label="211.128.192.15;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9286[label="17.136.141.17;30pkt 30fpkt", shape=pentagon, color=darkviolet];
9296[label="161.249.255.17;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9370[label="27.178.55.21;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9387[label="220.160.104.22;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9388[label="77.21.115.22;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9395[label="25.105.216.22;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9397[label="27.177.234.22;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9555[label="22.131.188.31;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9561[label="21.225.16.32;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9564[label="65.4.62.32;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9566[label="199.3.109.32;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9578[label="65.4.56.33;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9587[label="65.13.156.33;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9603[label="32.13.100.34;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9606[label="16.74.156.34;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9617[label="69.34.28.35;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9633[label="211.133.219.35;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9638[label="198.104.44.36;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9757[label="53.238.82.42;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9771[label="65.6.228.42;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9810[label="220.160.176.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9817[label="221.74.211.44;60pkt 60fpkt", shape=pentagon, color=darkviolet];
9838[label="216.128.212.45;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9852[label="16.149.169.46;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9863[label="221.200.191.47;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9909[label="29.110.29.50;16pkt 16fpkt", shape=pentagon, color=darkviolet];
9942[label="211.128.211.51;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9975[label="65.153.53.54;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9984[label="64.65.145.54;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9990[label="36.175.172.54;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10015[label="198.33.207.55;57pkt 57fpkt", shape=pentagon, color=darkviolet];
10042[label="20.171.194.56;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10072[label="32.13.117.58;50pkt 50fpkt", shape=pentagon, color=darkviolet];
10101[label="220.163.168.60;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10120[label="20.170.37.62;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10130[label="16.74.210.62;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10137[label="220.187.81.63;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10146[label="210.173.32.64;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10172[label="218.104.83.65;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10183[label="216.96.6.66;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10213[label="27.179.226.66;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10217[label="221.224.74.67;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10242[label="29.106.102.68;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10262[label="27.176.97.69;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10316[label="210.128.33.72;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10321[label="46.88.88.72;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10352[label="20.168.195.73;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10396[label="8.238.211.75;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10400[label="8.57.76.76;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10440[label="66.43.169.77;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10454[label="29.106.162.78;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10471[label="220.174.33.79;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10486[label="220.163.29.80;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10499[label="60.230.145.80;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10501[label="32.22.164.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10559[label="65.17.128.83;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10574[label="220.181.104.84;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10622[label="25.106.104.86;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10644[label="21.227.19.88;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10739[label="28.10.225.93;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10745[label="210.234.27.94;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10839[label="21.224.103.98;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10900[label="64.88.146.101;19pkt 19fpkt", shape=pentagon, color=darkviolet];
10982[label="27.176.42.106;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11047[label="20.171.138.109;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11052[label="54.159.160.109;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11064[label="69.35.116.110;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11077[label="64.64.136.111;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11123[label="49.142.131.113;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11169[label="27.181.40.116;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11183[label="220.182.56.117;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11203[label="210.128.54.118;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11221[label="29.110.33.119;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11255[label="220.181.156.121;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11262[label="22.131.1.122;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11266[label="210.32.46.122;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11281[label="221.204.178.122;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11321[label="211.68.113.125;24pkt 24fpkt", shape=pentagon, color=darkviolet];
11343[label="17.44.230.126;11pkt 11fpkt", shape=pentagon, color=darkviolet];
11414[label="216.128.197.130;11pkt 11fpkt", shape=pentagon, color=darkviolet];
11436[label="25.104.209.131;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11452[label="29.109.147.132;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11477[label="210.128.55.134;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11525[label="221.200.232.136;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11582[label="198.83.120.140;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11586[label="27.181.200.140;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11662[label="32.74.4.145;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11693[label="22.129.186.146;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11730[label="27.177.136.148;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11797[label="217.104.136.151;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11812[label="8.57.82.152;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11822[label="37.233.235.152;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11844[label="64.67.105.154;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11879[label="29.107.239.156;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11910[label="65.196.181.158;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11921[label="221.224.68.159;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11949[label="198.33.207.160;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11955[label="64.67.11.161;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11965[label="29.104.86.161;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11977[label="221.74.220.161;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11988[label="209.160.67.162;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12018[label="32.73.109.163;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12029[label="198.134.245.163;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12066[label="29.237.135.165;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12155[label="21.241.37.170;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12163[label="21.227.96.170;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12206[label="16.75.164.172;14pkt 14fpkt", shape=pentagon, color=darkviolet];
12217[label="52.126.54.173;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12223[label="65.13.160.173;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12232[label="220.182.55.174;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12255[label="69.35.236.175;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12285[label="27.178.118.177;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12312[label="29.109.250.178;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12314[label="69.34.29.179;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12316[label="27.176.57.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12341[label="20.171.177.180;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12369[label="69.68.170.182;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12384[label="21.241.195.183;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12404[label="21.227.32.185;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12405[label="203.55.41.185;84pkt 84fpkt", shape=pentagon, color=darkviolet];
12422[label="203.55.41.186;43pkt 43fpkt", shape=pentagon, color=darkviolet];
12456[label="220.168.218.187;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12491[label="27.179.181.189;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12521[label="220.174.16.192;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12522[label="220.163.18.192;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12524[label="2.46.24.192;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12544[label="199.57.45.193;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12557[label="69.34.88.194;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12632[label="42.226.202.197;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12647[label="65.153.54.199;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12649[label="20.170.84.199;14pkt 14fpkt", shape=pentagon, color=darkviolet];
12655[label="216.7.147.199;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12661[label="21.241.242.199;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12720[label="69.68.4.204;36pkt 36fpkt", shape=pentagon, color=darkviolet];
12737[label="65.196.7.205;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12742[label="69.34.100.205;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12757[label="21.224.21.206;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12808[label="28.11.229.208;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12812[label="16.147.18.209;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12838[label="48.185.83.210;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12848[label="120.78.23.211;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12858[label="217.33.65.211;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12936[label="216.108.196.216;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12941[label="211.71.66.217;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12953[label="17.130.236.217;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12981[label="8.57.224.219;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12983[label="64.67.236.219;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12985[label="25.106.58.220;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13009[label="221.206.201.221;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13012[label="28.48.42.222;34pkt 34fpkt", shape=pentagon, color=darkviolet];
13046[label="22.129.60.224;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13054[label="64.64.184.224;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13139[label="198.134.242.229;57pkt 57fpkt", shape=pentagon, color=darkviolet];
13165[label="64.66.44.232;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13167[label="38.22.57.232;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13196[label="218.105.197.233;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13244[label="27.178.61.237;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13276[label="217.27.68.239;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13281[label="211.138.177.239;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13307[label="64.67.100.241;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13312[label="28.49.167.241;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13358[label="69.219.178.245;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13374[label="41.252.142.246;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13418[label="22.128.146.249;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13423[label="38.210.209.249;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13476[label="220.181.16.255;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13487[label="218.105.226.255;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13509[label="22.131.32.2;11pkt 11fpkt", shape=invtriangle, color=brown];
13518[label="28.48.236.2;6pkt 6fpkt", shape=invtriangle, color=brown];
13535[label="69.68.117.4;5pkt 5fpkt", shape=invtriangle, color=brown];
13542[label="209.160.67.5;6pkt 6fpkt", shape=invtriangle, color=brown];
13557[label="218.104.165.6;7pkt 7fpkt", shape=invtriangle, color=brown];
13566[label="198.134.229.7;6pkt 6fpkt", shape=invtriangle, color=brown];
13624[label="28.49.180.12;6pkt 6fpkt", shape=invtriangle, color=brown];
13636[label="9.115.210.13;6pkt 6fpkt", shape=invtriangle, color=brown];
13679[label="17.136.141.17;30pkt 30fpkt", shape=invtriangle, color=brown];
13736[label="220.160.104.22;6pkt 6fpkt", shape=invtriangle, color=brown];
13741[label="25.105.216.22;5pkt 5fpkt", shape=invtriangle, color=brown];
13743[label="27.177.234.22;13pkt 13fpkt", shape=invtriangle, color=brown];
13839[label="22.131.188.31;14pkt 14fpkt", shape=invtriangle, color=brown];
13842[label="21.225.16.32;6pkt 6fpkt", shape=invtriangle, color=brown];
13845[label="65.4.62.32;7pkt 7fpkt", shape=invtriangle, color=brown];
13856[label="65.13.156.33;9pkt 9fpkt", shape=invtriangle, color=brown];
13883[label="211.133.219.35;5pkt 5fpkt", shape=invtriangle, color=brown];
13888[label="198.104.44.36;5pkt 5fpkt", shape=invtriangle, color=brown];
13960[label="53.238.82.42;8pkt 8fpkt", shape=invtriangle, color=brown];
13971[label="65.6.228.42;7pkt 7fpkt", shape=invtriangle, color=brown];
13993[label="220.160.176.44;2pkt 2fpkt", shape=invtriangle, color=brown];
14008[label="216.128.212.45;12pkt 12fpkt", shape=invtriangle, color=brown];
14020[label="221.200.191.47;7pkt 7fpkt", shape=invtriangle, color=brown];
14047[label="29.110.29.50;16pkt 16fpkt", shape=invtriangle, color=brown];
14068[label="211.128.211.51;9pkt 9fpkt", shape=invtriangle, color=brown];
14088[label="65.153.53.54;6pkt 6fpkt", shape=invtriangle, color=brown];
14123[label="20.171.194.56;6pkt 6fpkt", shape=invtriangle, color=brown];
14139[label="32.13.117.58;50pkt 50fpkt", shape=invtriangle, color=brown];
14168[label="20.170.37.62;6pkt 6fpkt", shape=invtriangle, color=brown];
14171[label="16.74.210.62;12pkt 12fpkt", shape=invtriangle, color=brown];
14172[label="220.187.81.63;11pkt 11fpkt", shape=invtriangle, color=brown];
14179[label="210.173.32.64;8pkt 8fpkt", shape=invtriangle, color=brown];
14199[label="216.96.6.66;6pkt 6fpkt", shape=invtriangle, color=brown];
14220[label="27.179.226.66;6pkt 6fpkt", shape=invtriangle, color=brown];
14223[label="221.224.74.67;16pkt 16fpkt", shape=invtriangle, color=brown];
14237[label="29.106.102.68;13pkt 13fpkt", shape=invtriangle, color=brown];
14282[label="46.88.88.72;9pkt 9fpkt", shape=invtriangle, color=brown];
14331[label="8.238.211.75;13pkt 13fpkt", shape=invtriangle, color=brown];
14375[label="220.174.33.79;6pkt 6fpkt", shape=invtriangle, color=brown];
14383[label="220.163.29.80;11pkt 11fpkt", shape=invtriangle, color=brown];
14421[label="65.17.128.83;6pkt 6fpkt", shape=invtriangle, color=brown];
14464[label="25.106.104.86;12pkt 12fpkt", shape=invtriangle, color=brown];
14534[label="28.10.225.93;10pkt 10fpkt", shape=invtriangle, color=brown];
14591[label="21.224.103.98;6pkt 6fpkt", shape=invtriangle, color=brown];
14631[label="64.88.146.101;19pkt 19fpkt", shape=invtriangle, color=brown];
14719[label="20.171.138.109;6pkt 6fpkt", shape=invtriangle, color=brown];
14720[label="54.159.160.109;5pkt 5fpkt", shape=invtriangle, color=brown];
14734[label="64.64.136.111;6pkt 6fpkt", shape=invtriangle, color=brown];
14764[label="49.142.131.113;10pkt 10fpkt", shape=invtriangle, color=brown];
14788[label="27.181.40.116;6pkt 6fpkt", shape=invtriangle, color=brown];
14795[label="220.182.56.117;5pkt 5fpkt", shape=invtriangle, color=brown];
14809[label="210.128.54.118;6pkt 6fpkt", shape=invtriangle, color=brown];
14827[label="69.137.224.119;12pkt 12fpkt", shape=invtriangle, color=brown];
14839[label="220.181.156.121;12pkt 12fpkt", shape=invtriangle, color=brown];
14843[label="22.131.1.122;14pkt 14fpkt", shape=invtriangle, color=brown];
14846[label="210.32.46.122;6pkt 6fpkt", shape=invtriangle, color=brown];
14853[label="221.204.178.122;6pkt 6fpkt", shape=invtriangle, color=brown];
14873[label="211.68.113.125;24pkt 24fpkt", shape=invtriangle, color=brown];
14881[label="17.44.230.126;11pkt 11fpkt", shape=invtriangle, color=brown];
14941[label="25.104.209.131;6pkt 6fpkt", shape=invtriangle, color=brown];
14952[label="29.109.147.132;6pkt 6fpkt", shape=invtriangle, color=brown];
14968[label="210.128.55.134;15pkt 15fpkt", shape=invtriangle, color=brown];
14995[label="221.200.232.136;6pkt 6fpkt", shape=invtriangle, color=brown];
15024[label="198.83.120.140;10pkt 10fpkt", shape=invtriangle, color=brown];
15075[label="32.74.4.145;20pkt 20fpkt", shape=invtriangle, color=brown];
15094[label="22.129.186.146;6pkt 6fpkt", shape=invtriangle, color=brown];
15118[label="27.177.136.148;6pkt 6fpkt", shape=invtriangle, color=brown];
15171[label="8.57.82.152;10pkt 10fpkt", shape=invtriangle, color=brown];
15176[label="37.233.235.152;5pkt 5fpkt", shape=invtriangle, color=brown];
15262[label="29.104.86.161;21pkt 21fpkt", shape=invtriangle, color=brown];
15270[label="221.74.220.161;12pkt 12fpkt", shape=invtriangle, color=brown];
15275[label="209.160.67.162;2pkt 2fpkt", shape=invtriangle, color=brown];
15294[label="32.73.109.163;15pkt 15fpkt", shape=invtriangle, color=brown];
15300[label="198.134.245.163;10pkt 10fpkt", shape=invtriangle, color=brown];
15320[label="29.237.135.165;6pkt 6fpkt", shape=invtriangle, color=brown];
15375[label="21.241.37.170;4pkt 4fpkt", shape=invtriangle, color=brown];
15380[label="21.227.96.170;6pkt 6fpkt", shape=invtriangle, color=brown];
15404[label="16.75.164.172;14pkt 14fpkt", shape=invtriangle, color=brown];
15410[label="52.126.54.173;13pkt 13fpkt", shape=invtriangle, color=brown];
15420[label="220.182.55.174;6pkt 6fpkt", shape=invtriangle, color=brown];
15471[label="69.34.29.179;6pkt 6fpkt", shape=invtriangle, color=brown];
15473[label="27.176.57.179;1pkt 1fpkt", shape=invtriangle, color=brown];
15505[label="69.68.170.182;6pkt 6fpkt", shape=invtriangle, color=brown];
15522[label="21.227.32.185;15pkt 15fpkt", shape=invtriangle, color=brown];
15523[label="203.55.41.185;84pkt 84fpkt", shape=invtriangle, color=brown];
15534[label="203.55.41.186;43pkt 43fpkt", shape=invtriangle, color=brown];
15569[label="27.179.181.189;6pkt 6fpkt", shape=invtriangle, color=brown];
15587[label="220.163.18.192;6pkt 6fpkt", shape=invtriangle, color=brown];
15588[label="2.46.24.192;13pkt 13fpkt", shape=invtriangle, color=brown];
15600[label="199.57.45.193;5pkt 5fpkt", shape=invtriangle, color=brown];
15606[label="69.34.88.194;9pkt 9fpkt", shape=invtriangle, color=brown];
15662[label="65.153.54.199;8pkt 8fpkt", shape=invtriangle, color=brown];
15670[label="21.241.242.199;11pkt 11fpkt", shape=invtriangle, color=brown];
15716[label="65.196.7.205;7pkt 7fpkt", shape=invtriangle, color=brown];
15718[label="69.34.100.205;8pkt 8fpkt", shape=invtriangle, color=brown];
15723[label="21.224.21.206;7pkt 7fpkt", shape=invtriangle, color=brown];
15822[label="211.71.66.217;10pkt 10fpkt", shape=invtriangle, color=brown];
15831[label="17.130.236.217;12pkt 12fpkt", shape=invtriangle, color=brown];
15849[label="25.106.58.220;6pkt 6fpkt", shape=invtriangle, color=brown];
15863[label="221.206.201.221;6pkt 6fpkt", shape=invtriangle, color=brown];
15885[label="64.64.184.224;8pkt 8fpkt", shape=invtriangle, color=brown];
15934[label="198.134.242.229;57pkt 57fpkt", shape=invtriangle, color=brown];
15950[label="64.66.44.232;7pkt 7fpkt", shape=invtriangle, color=brown];
15951[label="38.22.57.232;6pkt 6fpkt", shape=invtriangle, color=brown];
16005[label="217.27.68.239;12pkt 12fpkt", shape=invtriangle, color=brown];
16024[label="64.67.100.241;7pkt 7fpkt", shape=invtriangle, color=brown];
16062[label="41.252.142.246;5pkt 5fpkt", shape=invtriangle, color=brown];
16091[label="22.128.146.249;7pkt 7fpkt", shape=invtriangle, color=brown];
16094[label="38.210.209.249;13pkt 13fpkt", shape=invtriangle, color=brown];
16129[label="220.181.16.255;10pkt 10fpkt", shape=invtriangle, color=brown];
16136[label="218.105.226.255;7pkt 7fpkt", shape=invtriangle, color=brown];
16152[label="22.131.32.2;12pkt 12fpkt", shape=invhouse, color=bisque];
16173[label="69.68.117.4;6pkt 6fpkt", shape=invhouse, color=bisque];
16178[label="209.160.67.5;6pkt 6fpkt", shape=invhouse, color=bisque];
16261[label="17.136.141.17;30pkt 30fpkt", shape=invhouse, color=bisque];
16294[label="25.105.216.22;6pkt 6fpkt", shape=invhouse, color=bisque];
16357[label="21.225.16.32;6pkt 6fpkt", shape=invhouse, color=bisque];
16380[label="211.133.219.35;6pkt 6fpkt", shape=invhouse, color=bisque];
16383[label="198.104.44.36;6pkt 6fpkt", shape=invhouse, color=bisque];
16436[label="53.238.82.42;8pkt 8fpkt", shape=invhouse, color=bisque];
16442[label="65.6.228.42;7pkt 7fpkt", shape=invhouse, color=bisque];
16453[label="220.160.176.44;2pkt 2fpkt", shape=invhouse, color=bisque];
16465[label="216.128.212.45;12pkt 12fpkt", shape=invhouse, color=bisque];
16472[label="221.200.191.47;7pkt 7fpkt", shape=invhouse, color=bisque];
16510[label="211.128.211.51;9pkt 9fpkt", shape=invhouse, color=bisque];
16524[label="65.153.53.54;6pkt 6fpkt", shape=invhouse, color=bisque];
16542[label="20.171.194.56;6pkt 6fpkt", shape=invhouse, color=bisque];
16578[label="20.170.37.62;6pkt 6fpkt", shape=invhouse, color=bisque];
16585[label="210.173.32.64;8pkt 8fpkt", shape=invhouse, color=bisque];
16598[label="216.96.6.66;6pkt 6fpkt", shape=invhouse, color=bisque];
16611[label="27.179.226.66;6pkt 6fpkt", shape=invhouse, color=bisque];
16613[label="221.224.74.67;16pkt 16fpkt", shape=invhouse, color=bisque];
16621[label="29.106.102.68;13pkt 13fpkt", shape=invhouse, color=bisque];
16678[label="8.238.211.75;13pkt 13fpkt", shape=invhouse, color=bisque];
16691[label="22.130.18.77;17pkt 17fpkt", shape=invhouse, color=bisque];
16714[label="220.163.29.80;11pkt 11fpkt", shape=invhouse, color=bisque];
16736[label="65.17.128.83;6pkt 6fpkt", shape=invhouse, color=bisque];
16766[label="25.106.104.86;12pkt 12fpkt", shape=invhouse, color=bisque];
16843[label="21.224.103.98;6pkt 6fpkt", shape=invhouse, color=bisque];
16863[label="64.88.146.101;19pkt 19fpkt", shape=invhouse, color=bisque];
16917[label="20.171.138.109;6pkt 6fpkt", shape=invhouse, color=bisque];
16918[label="54.159.160.109;5pkt 5fpkt", shape=invhouse, color=bisque];
16926[label="64.64.136.111;6pkt 6fpkt", shape=invhouse, color=bisque];
16943[label="49.142.131.113;10pkt 10fpkt", shape=invhouse, color=bisque];
16956[label="27.181.40.116;6pkt 6fpkt", shape=invhouse, color=bisque];
16974[label="69.137.224.119;12pkt 12fpkt", shape=invhouse, color=bisque];
16982[label="220.181.156.121;12pkt 12fpkt", shape=invhouse, color=bisque];
16986[label="22.131.1.122;14pkt 14fpkt", shape=invhouse, color=bisque];
17002[label="211.68.113.125;24pkt 24fpkt", shape=invhouse, color=bisque];
17007[label="17.44.230.126;11pkt 11fpkt", shape=invhouse, color=bisque];
17042[label="25.104.209.131;6pkt 6fpkt", shape=invhouse, color=bisque];
17058[label="210.128.55.134;15pkt 15fpkt", shape=invhouse, color=bisque];
17072[label="221.200.232.136;6pkt 6fpkt", shape=invhouse, color=bisque];
17088[label="198.83.120.140;10pkt 10fpkt", shape=invhouse, color=bisque];
17129[label="22.129.186.146;6pkt 6fpkt", shape=invhouse, color=bisque];
17143[label="27.177.136.148;6pkt 6fpkt", shape=invhouse, color=bisque];
17181[label="8.57.82.152;10pkt 10fpkt", shape=invhouse, color=bisque];
17185[label="37.233.235.152;5pkt 5fpkt", shape=invhouse, color=bisque];
17228[label="29.104.86.161;21pkt 21fpkt", shape=invhouse, color=bisque];
17234[label="221.74.220.161;12pkt 12fpkt", shape=invhouse, color=bisque];
17297[label="21.227.96.170;6pkt 6fpkt", shape=invhouse, color=bisque];
17305[label="16.75.164.172;14pkt 14fpkt", shape=invhouse, color=bisque];
17308[label="52.126.54.173;13pkt 13fpkt", shape=invhouse, color=bisque];
17315[label="220.182.55.174;6pkt 6fpkt", shape=invhouse, color=bisque];
17342[label="69.34.29.179;6pkt 6fpkt", shape=invhouse, color=bisque];
17344[label="27.176.57.179;1pkt 1fpkt", shape=invhouse, color=bisque];
17363[label="69.68.170.182;6pkt 6fpkt", shape=invhouse, color=bisque];
17371[label="21.227.32.185;15pkt 15fpkt", shape=invhouse, color=bisque];
17372[label="203.55.41.185;84pkt 84fpkt", shape=invhouse, color=bisque];
17409[label="220.163.18.192;6pkt 6fpkt", shape=invhouse, color=bisque];
17419[label="199.57.45.193;5pkt 5fpkt", shape=invhouse, color=bisque];
17424[label="69.34.88.194;9pkt 9fpkt", shape=invhouse, color=bisque];
17459[label="65.153.54.199;8pkt 8fpkt", shape=invhouse, color=bisque];
17462[label="21.241.242.199;11pkt 11fpkt", shape=invhouse, color=bisque];
17480[label="69.34.100.205;8pkt 8fpkt", shape=invhouse, color=bisque];
17484[label="21.224.21.206;7pkt 7fpkt", shape=invhouse, color=bisque];
17544[label="211.71.66.217;10pkt 10fpkt", shape=invhouse, color=bisque];
17550[label="17.130.236.217;12pkt 12fpkt", shape=invhouse, color=bisque];
17564[label="25.106.58.220;6pkt 6fpkt", shape=invhouse, color=bisque];
17573[label="221.206.201.221;6pkt 6fpkt", shape=invhouse, color=bisque];
17615[label="198.134.242.229;57pkt 57fpkt", shape=invhouse, color=bisque];
17630[label="64.66.44.232;7pkt 7fpkt", shape=invhouse, color=bisque];
17668[label="217.27.68.239;12pkt 12fpkt", shape=invhouse, color=bisque];
17677[label="64.67.100.241;7pkt 7fpkt", shape=invhouse, color=bisque];
17717[label="22.128.146.249;7pkt 7fpkt", shape=invhouse, color=bisque];
17741[label="220.181.16.255;10pkt 10fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.190.180.100:80}[86.4271%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4957%)&lt;BR/&gt; 443: (0.402699%)&lt;BR/&gt; 1088: (0.0834422%)&lt;BR/&gt; 53: (0.0798143%)&lt;BR/&gt; 49227: (0.0725584%)&gt;];
}
915--1436[label="0.647059;11pkt 11fpkt"];
915--1503[label="0.5;6pkt 6fpkt"];
915--1577[label="1;14pkt 14fpkt"];
915--1647[label="0.857143;6pkt 6fpkt"];
915--2395[label="0.806452;25pkt 25fpkt"];
915--2478[label="1;13pkt 13fpkt"];
915--2522[label="1;30pkt 30fpkt"];
915--2583[label="1;13pkt 13fpkt"];
915--2591[label="1;14pkt 14fpkt"];
915--3049[label="0.863636;38pkt 38fpkt"];
915--3116[label="1;18pkt 18fpkt"];
915--3276[label="1;27pkt 27fpkt"];
915--4325[label="1;26pkt 26fpkt"];
915--4380[label="0.730769;19pkt 19fpkt"];
915--4561[label="1;15pkt 15fpkt"];
915--5163[label="0.12987;10pkt 10fpkt"];
915--5498[label="0.538462;7pkt 7fpkt"];
915--5514[label="1;28pkt 28fpkt"];
915--5760[label="0.166667;1pkt 1fpkt"];
915--5964[label="0.0877193;5pkt 5fpkt"];
915--6086[label="1;30pkt 30fpkt"];
915--6138[label="1;14pkt 14fpkt"];
915--6264[label="0.171429;18pkt 18fpkt"];
915--6450[label="1;12pkt 12fpkt"];
915--6508[label="1;34pkt 34fpkt"];
915--7611[label="1;3164pkt 3164fpkt"];
915--8233[label="0.666667;10pkt 10fpkt"];
915--8884[label="0.0608365;288pkt 288fpkt"];
915--8894[label="0.0593578;281pkt 281fpkt"];
915--8902[label="0.0553443;262pkt 262fpkt"];
915--8909[label="0.0779468;369pkt 369fpkt"];
915--8961[label="1;12pkt 12fpkt"];
915--8983[label="1;6pkt 6fpkt"];
915--9019[label="1;6pkt 6fpkt"];
915--9024[label="1;5pkt 5fpkt"];
915--9065[label="1;6pkt 6fpkt"];
915--9083[label="1;5pkt 5fpkt"];
915--9097[label="1;5pkt 5fpkt"];
915--9159[label="0.111111;2pkt 2fpkt"];
915--9182[label="1;7pkt 7fpkt"];
915--9193[label="1;7pkt 7fpkt"];
915--9215[label="1;6pkt 6fpkt"];
915--9244[label="0.538462;7pkt 7fpkt"];
915--9286[label="1;30pkt 30fpkt"];
915--9296[label="0.9;9pkt 9fpkt"];
915--9370[label="1;13pkt 13fpkt"];
915--9387[label="1;6pkt 6fpkt"];
915--9388[label="0.5;6pkt 6fpkt"];
915--9395[label="1;6pkt 6fpkt"];
915--9397[label="0.5;7pkt 7fpkt"];
915--9555[label="1;14pkt 14fpkt"];
915--9561[label="1;6pkt 6fpkt"];
915--9564[label="1;7pkt 7fpkt"];
915--9566[label="1;6pkt 6fpkt"];
915--9578[label="1;7pkt 7fpkt"];
915--9587[label="1;10pkt 10fpkt"];
915--9603[label="0.4;2pkt 2fpkt"];
915--9606[label="1;6pkt 6fpkt"];
915--9617[label="1;7pkt 7fpkt"];
915--9626[label="0.404255;19pkt 19fpkt"];
915--9633[label="1;6pkt 6fpkt"];
915--9638[label="1;6pkt 6fpkt"];
915--9705[label="0.416667;5pkt 5fpkt"];
915--9746[label="0.333333;3pkt 3fpkt"];
915--9757[label="1;8pkt 8fpkt"];
915--9771[label="1;7pkt 7fpkt"];
915--9810[label="1;2pkt 2fpkt"];
915--9817[label="0.9;54pkt 54fpkt"];
915--9838[label="1;12pkt 12fpkt"];
915--9852[label="1;6pkt 6fpkt"];
915--9863[label="1;7pkt 7fpkt"];
915--9909[label="1;16pkt 16fpkt"];
915--9942[label="1;9pkt 9fpkt"];
915--9975[label="1;6pkt 6fpkt"];
915--9984[label="1;6pkt 6fpkt"];
915--9990[label="1;6pkt 6fpkt"];
915--10015[label="0.0877193;5pkt 5fpkt"];
915--10042[label="1;6pkt 6fpkt"];
915--10101[label="1;6pkt 6fpkt"];
915--10120[label="1;6pkt 6fpkt"];
915--10130[label="1;12pkt 12fpkt"];
915--10137[label="1;11pkt 11fpkt"];
915--10146[label="0.5;4pkt 4fpkt"];
915--10172[label="1;7pkt 7fpkt"];
915--10183[label="1;6pkt 6fpkt"];
915--10213[label="1;6pkt 6fpkt"];
915--10217[label="0.9375;15pkt 15fpkt"];
915--10242[label="1;13pkt 13fpkt"];
915--10262[label="1;9pkt 9fpkt"];
915--10316[label="1;7pkt 7fpkt"];
915--10321[label="1;9pkt 9fpkt"];
915--10352[label="1;6pkt 6fpkt"];
915--10396[label="1;13pkt 13fpkt"];
915--10400[label="1;7pkt 7fpkt"];
915--10440[label="1;6pkt 6fpkt"];
915--10454[label="1;6pkt 6fpkt"];
915--10471[label="1;6pkt 6fpkt"];
915--10486[label="1;11pkt 11fpkt"];
915--10499[label="1;13pkt 13fpkt"];
915--10507[label="0.545455;6pkt 6fpkt"];
915--10559[label="1;6pkt 6fpkt"];
915--10574[label="1;6pkt 6fpkt"];
915--10622[label="1;12pkt 12fpkt"];
915--10644[label="1;7pkt 7fpkt"];
915--10739[label="1;10pkt 10fpkt"];
915--10745[label="1;9pkt 9fpkt"];
915--10754[label="0.230769;3pkt 3fpkt"];
915--10839[label="1;6pkt 6fpkt"];
915--10869[label="0.666667;6pkt 6fpkt"];
915--10900[label="1;19pkt 19fpkt"];
915--10982[label="1;6pkt 6fpkt"];
915--11047[label="1;6pkt 6fpkt"];
915--11052[label="1;5pkt 5fpkt"];
915--11077[label="1;6pkt 6fpkt"];
915--11123[label="1;10pkt 10fpkt"];
915--11169[label="1;6pkt 6fpkt"];
915--11183[label="0.2;1pkt 1fpkt"];
915--11203[label="1;6pkt 6fpkt"];
915--11221[label="1;6pkt 6fpkt"];
915--11255[label="1;12pkt 12fpkt"];
915--11262[label="1;14pkt 14fpkt"];
915--11266[label="1;6pkt 6fpkt"];
915--11281[label="1;6pkt 6fpkt"];
915--11321[label="1;24pkt 24fpkt"];
915--11343[label="1;11pkt 11fpkt"];
915--11414[label="1;11pkt 11fpkt"];
915--11436[label="1;6pkt 6fpkt"];
915--11444[label="0.142857;1pkt 1fpkt"];
915--11452[label="1;6pkt 6fpkt"];
915--11477[label="1;15pkt 15fpkt"];
915--11525[label="1;6pkt 6fpkt"];
915--11582[label="1;10pkt 10fpkt"];
915--11586[label="1;6pkt 6fpkt"];
915--11596[label="0.375;3pkt 3fpkt"];
915--11662[label="0.95;19pkt 19fpkt"];
915--11693[label="1;6pkt 6fpkt"];
915--11730[label="1;6pkt 6fpkt"];
915--11732[label="0.416667;5pkt 5fpkt"];
915--11797[label="1;7pkt 7fpkt"];
915--11812[label="1;10pkt 10fpkt"];
915--11822[label="1;5pkt 5fpkt"];
915--11844[label="1;7pkt 7fpkt"];
915--11879[label="1;6pkt 6fpkt"];
915--11910[label="0.8;8pkt 8fpkt"];
915--11921[label="1;7pkt 7fpkt"];
915--11949[label="0.5;3pkt 3fpkt"];
915--11955[label="1;17pkt 17fpkt"];
915--11965[label="0.428571;9pkt 9fpkt"];
915--11977[label="1;12pkt 12fpkt"];
915--11988[label="0.5;1pkt 1fpkt"];
915--12018[label="1;15pkt 15fpkt"];
915--12029[label="0.7;7pkt 7fpkt"];
915--12066[label="1;6pkt 6fpkt"];
915--12155[label="1;4pkt 4fpkt"];
915--12163[label="1;6pkt 6fpkt"];
915--12206[label="1;14pkt 14fpkt"];
915--12217[label="1;13pkt 13fpkt"];
915--12223[label="1;6pkt 6fpkt"];
915--12232[label="1;6pkt 6fpkt"];
915--12255[label="0.9;9pkt 9fpkt"];
915--12285[label="1;6pkt 6fpkt"];
915--12312[label="1;6pkt 6fpkt"];
915--12314[label="1;6pkt 6fpkt"];
915--12341[label="1;6pkt 6fpkt"];
915--12369[label="1;6pkt 6fpkt"];
915--12384[label="1;7pkt 7fpkt"];
915--12404[label="1;15pkt 15fpkt"];
915--12405[label="0.154762;13pkt 13fpkt"];
915--12422[label="0.651163;28pkt 28fpkt"];
915--12456[label="1;6pkt 6fpkt"];
915--12491[label="1;6pkt 6fpkt"];
915--12521[label="1;20pkt 20fpkt"];
915--12522[label="1;6pkt 6fpkt"];
915--12524[label="1;13pkt 13fpkt"];
915--12544[label="0.6;3pkt 3fpkt"];
915--12557[label="1;9pkt 9fpkt"];
915--12632[label="1;12pkt 12fpkt"];
915--12647[label="1;8pkt 8fpkt"];
915--12649[label="1;14pkt 14fpkt"];
915--12655[label="1;15pkt 15fpkt"];
915--12661[label="1;11pkt 11fpkt"];
915--12720[label="1;36pkt 36fpkt"];
915--12737[label="0.571429;4pkt 4fpkt"];
915--12742[label="1;8pkt 8fpkt"];
915--12757[label="1;7pkt 7fpkt"];
915--12776[label="0.4;4pkt 4fpkt"];
915--12808[label="1;6pkt 6fpkt"];
915--12812[label="1;12pkt 12fpkt"];
915--12838[label="1;12pkt 12fpkt"];
915--12848[label="1;12pkt 12fpkt"];
915--12858[label="1;15pkt 15fpkt"];
915--12936[label="1;6pkt 6fpkt"];
915--12941[label="1;10pkt 10fpkt"];
915--12953[label="1;12pkt 12fpkt"];
915--12981[label="1;9pkt 9fpkt"];
915--12983[label="1;13pkt 13fpkt"];
915--12985[label="1;6pkt 6fpkt"];
915--13009[label="0.833333;5pkt 5fpkt"];
915--13012[label="1;34pkt 34fpkt"];
915--13046[label="1;15pkt 15fpkt"];
915--13054[label="1;8pkt 8fpkt"];
915--13096[label="0.0588235;1pkt 1fpkt"];
915--13139[label="0.859649;49pkt 49fpkt"];
915--13165[label="1;7pkt 7fpkt"];
915--13167[label="1;6pkt 6fpkt"];
915--13196[label="1;14pkt 14fpkt"];
915--13244[label="1;6pkt 6fpkt"];
915--13276[label="1;12pkt 12fpkt"];
915--13281[label="1;6pkt 6fpkt"];
915--13307[label="1;7pkt 7fpkt"];
915--13312[label="1;6pkt 6fpkt"];
915--13358[label="1;11pkt 11fpkt"];
915--13374[label="1;5pkt 5fpkt"];
915--13418[label="1;7pkt 7fpkt"];
915--13423[label="1;13pkt 13fpkt"];
915--13476[label="1;10pkt 10fpkt"];
915--13487[label="1;7pkt 7fpkt"];
915--13509[label="1;11pkt 11fpkt"];
915--13518[label="1;6pkt 6fpkt"];
915--13535[label="1;5pkt 5fpkt"];
915--13557[label="1;7pkt 7fpkt"];
915--13566[label="1;6pkt 6fpkt"];
915--13624[label="1;6pkt 6fpkt"];
915--13636[label="1;6pkt 6fpkt"];
915--13679[label="1;30pkt 30fpkt"];
915--13736[label="1;6pkt 6fpkt"];
915--13741[label="1;5pkt 5fpkt"];
915--13743[label="0.461538;6pkt 6fpkt"];
915--13839[label="1;14pkt 14fpkt"];
915--13842[label="1;6pkt 6fpkt"];
915--13845[label="1;7pkt 7fpkt"];
915--13856[label="1;9pkt 9fpkt"];
915--13883[label="1;5pkt 5fpkt"];
915--13888[label="1;5pkt 5fpkt"];
915--13932[label="0.416667;5pkt 5fpkt"];
915--13960[label="1;8pkt 8fpkt"];
915--13971[label="1;7pkt 7fpkt"];
915--13993[label="1;2pkt 2fpkt"];
915--14008[label="1;12pkt 12fpkt"];
915--14020[label="1;7pkt 7fpkt"];
915--14047[label="1;16pkt 16fpkt"];
915--14068[label="1;9pkt 9fpkt"];
915--14088[label="1;6pkt 6fpkt"];
915--14123[label="1;6pkt 6fpkt"];
915--14168[label="1;6pkt 6fpkt"];
915--14171[label="1;12pkt 12fpkt"];
915--14172[label="1;11pkt 11fpkt"];
915--14179[label="0.5;4pkt 4fpkt"];
915--14199[label="1;6pkt 6fpkt"];
915--14220[label="1;6pkt 6fpkt"];
915--14223[label="0.9375;15pkt 15fpkt"];
915--14237[label="1;13pkt 13fpkt"];
915--14282[label="1;9pkt 9fpkt"];
915--14331[label="1;13pkt 13fpkt"];
915--14375[label="1;6pkt 6fpkt"];
915--14383[label="1;11pkt 11fpkt"];
915--14390[label="0.545455;6pkt 6fpkt"];
915--14421[label="1;6pkt 6fpkt"];
915--14464[label="1;12pkt 12fpkt"];
915--14534[label="1;10pkt 10fpkt"];
915--14540[label="0.230769;3pkt 3fpkt"];
915--14591[label="1;6pkt 6fpkt"];
915--14631[label="1;19pkt 19fpkt"];
915--14719[label="1;6pkt 6fpkt"];
915--14720[label="1;5pkt 5fpkt"];
915--14734[label="1;6pkt 6fpkt"];
915--14764[label="1;10pkt 10fpkt"];
915--14788[label="1;6pkt 6fpkt"];
915--14795[label="0.2;1pkt 1fpkt"];
915--14809[label="1;6pkt 6fpkt"];
915--14827[label="1;12pkt 12fpkt"];
915--14839[label="1;12pkt 12fpkt"];
915--14843[label="1;14pkt 14fpkt"];
915--14846[label="1;6pkt 6fpkt"];
915--14853[label="1;6pkt 6fpkt"];
915--14873[label="1;24pkt 24fpkt"];
915--14881[label="1;11pkt 11fpkt"];
915--14941[label="1;6pkt 6fpkt"];
915--14952[label="1;6pkt 6fpkt"];
915--14968[label="1;15pkt 15fpkt"];
915--14995[label="1;6pkt 6fpkt"];
915--15024[label="1;10pkt 10fpkt"];
915--15029[label="0.375;3pkt 3fpkt"];
915--15075[label="0.95;19pkt 19fpkt"];
915--15094[label="1;6pkt 6fpkt"];
915--15118[label="1;6pkt 6fpkt"];
915--15119[label="0.416667;5pkt 5fpkt"];
915--15171[label="1;10pkt 10fpkt"];
915--15176[label="1;5pkt 5fpkt"];
915--15262[label="0.428571;9pkt 9fpkt"];
915--15270[label="1;12pkt 12fpkt"];
915--15275[label="0.5;1pkt 1fpkt"];
915--15294[label="1;15pkt 15fpkt"];
915--15300[label="0.7;7pkt 7fpkt"];
915--15320[label="1;6pkt 6fpkt"];
915--15375[label="1;4pkt 4fpkt"];
915--15380[label="1;6pkt 6fpkt"];
915--15404[label="1;14pkt 14fpkt"];
915--15410[label="1;13pkt 13fpkt"];
915--15420[label="1;6pkt 6fpkt"];
915--15471[label="1;6pkt 6fpkt"];
915--15505[label="1;6pkt 6fpkt"];
915--15522[label="1;15pkt 15fpkt"];
915--15523[label="0.154762;13pkt 13fpkt"];
915--15534[label="0.651163;28pkt 28fpkt"];
915--15569[label="1;6pkt 6fpkt"];
915--15587[label="1;6pkt 6fpkt"];
915--15588[label="1;13pkt 13fpkt"];
915--15600[label="0.6;3pkt 3fpkt"];
915--15606[label="1;9pkt 9fpkt"];
915--15662[label="1;8pkt 8fpkt"];
915--15670[label="1;11pkt 11fpkt"];
915--15716[label="0.571429;4pkt 4fpkt"];
915--15718[label="1;8pkt 8fpkt"];
915--15723[label="1;7pkt 7fpkt"];
915--15733[label="0.4;4pkt 4fpkt"];
915--15822[label="1;10pkt 10fpkt"];
915--15831[label="1;12pkt 12fpkt"];
915--15849[label="1;6pkt 6fpkt"];
915--15863[label="0.833333;5pkt 5fpkt"];
915--15885[label="1;8pkt 8fpkt"];
915--15934[label="0.859649;49pkt 49fpkt"];
915--15950[label="1;7pkt 7fpkt"];
915--15951[label="1;6pkt 6fpkt"];
915--16005[label="1;12pkt 12fpkt"];
915--16024[label="1;7pkt 7fpkt"];
915--16062[label="1;5pkt 5fpkt"];
915--16091[label="1;7pkt 7fpkt"];
915--16094[label="1;13pkt 13fpkt"];
915--16129[label="1;10pkt 10fpkt"];
915--16136[label="1;7pkt 7fpkt"];
915--16152[label="1;12pkt 12fpkt"];
915--16173[label="1;6pkt 6fpkt"];
915--16261[label="1;30pkt 30fpkt"];
915--16294[label="1;6pkt 6fpkt"];
915--16357[label="1;6pkt 6fpkt"];
915--16380[label="1;6pkt 6fpkt"];
915--16383[label="1;6pkt 6fpkt"];
915--16414[label="0.416667;5pkt 5fpkt"];
915--16436[label="1;8pkt 8fpkt"];
915--16442[label="1;7pkt 7fpkt"];
915--16453[label="1;2pkt 2fpkt"];
915--16465[label="1;12pkt 12fpkt"];
915--16472[label="1;7pkt 7fpkt"];
915--16510[label="1;9pkt 9fpkt"];
915--16524[label="1;6pkt 6fpkt"];
915--16542[label="1;6pkt 6fpkt"];
915--16578[label="1;6pkt 6fpkt"];
915--16585[label="0.5;4pkt 4fpkt"];
915--16598[label="1;6pkt 6fpkt"];
915--16611[label="1;6pkt 6fpkt"];
915--16613[label="0.9375;15pkt 15fpkt"];
915--16621[label="1;13pkt 13fpkt"];
915--16678[label="1;13pkt 13fpkt"];
915--16691[label="0.941176;16pkt 16fpkt"];
915--16714[label="1;11pkt 11fpkt"];
915--16717[label="0.545455;6pkt 6fpkt"];
915--16736[label="1;6pkt 6fpkt"];
915--16766[label="1;12pkt 12fpkt"];
915--16843[label="1;6pkt 6fpkt"];
915--16863[label="1;19pkt 19fpkt"];
915--16917[label="1;6pkt 6fpkt"];
915--16918[label="1;5pkt 5fpkt"];
915--16926[label="1;6pkt 6fpkt"];
915--16943[label="1;10pkt 10fpkt"];
915--16956[label="1;6pkt 6fpkt"];
915--16974[label="1;12pkt 12fpkt"];
915--16982[label="1;12pkt 12fpkt"];
915--16986[label="1;14pkt 14fpkt"];
915--17002[label="1;24pkt 24fpkt"];
915--17007[label="1;11pkt 11fpkt"];
915--17042[label="1;6pkt 6fpkt"];
915--17058[label="1;15pkt 15fpkt"];
915--17072[label="1;6pkt 6fpkt"];
915--17088[label="1;10pkt 10fpkt"];
915--17129[label="1;6pkt 6fpkt"];
915--17143[label="1;6pkt 6fpkt"];
915--17181[label="1;10pkt 10fpkt"];
915--17185[label="1;5pkt 5fpkt"];
915--17228[label="0.428571;9pkt 9fpkt"];
915--17234[label="1;12pkt 12fpkt"];
915--17297[label="1;6pkt 6fpkt"];
915--17305[label="1;14pkt 14fpkt"];
915--17308[label="1;13pkt 13fpkt"];
915--17315[label="1;6pkt 6fpkt"];
915--17342[label="1;6pkt 6fpkt"];
915--17363[label="1;6pkt 6fpkt"];
915--17371[label="1;15pkt 15fpkt"];
915--17372[label="0.154762;13pkt 13fpkt"];
915--17409[label="1;6pkt 6fpkt"];
915--17419[label="0.6;3pkt 3fpkt"];
915--17424[label="1;9pkt 9fpkt"];
915--17459[label="1;8pkt 8fpkt"];
915--17462[label="1;11pkt 11fpkt"];
915--17480[label="1;8pkt 8fpkt"];
915--17484[label="1;7pkt 7fpkt"];
915--17490[label="0.4;4pkt 4fpkt"];
915--17544[label="1;10pkt 10fpkt"];
915--17550[label="1;12pkt 12fpkt"];
915--17564[label="1;6pkt 6fpkt"];
915--17573[label="0.833333;5pkt 5fpkt"];
915--17615[label="0.859649;49pkt 49fpkt"];
915--17630[label="1;7pkt 7fpkt"];
915--17668[label="1;12pkt 12fpkt"];
915--17677[label="1;7pkt 7fpkt"];
915--17717[label="1;7pkt 7fpkt"];
915--17741[label="1;10pkt 10fpkt"];
957--1436[label="0.0588235;1pkt 1fpkt"];
957--3637[label="0.0135135;1pkt 1fpkt"];
957--4077[label="0.00458716;1pkt 1fpkt"];
957--4228[label="0.0147059;1pkt 1fpkt"];
957--4380[label="0.269231;7pkt 7fpkt"];
957--5163[label="0.025974;2pkt 2fpkt"];
957--5261[label="0.00990099;1pkt 1fpkt"];
957--5330[label="0.956522;44pkt 44fpkt"];
957--5964[label="0.912281;52pkt 52fpkt"];
957--6242[label="0.00806452;1pkt 1fpkt"];
957--6723[label="1;163pkt 163fpkt"];
957--8617[label="0.952381;40pkt 40fpkt"];
957--8884[label="0.026936;8pkt 8fpkt"];
957--8894[label="0.0707071;21pkt 21fpkt"];
957--8902[label="0.0707071;21pkt 21fpkt"];
957--8909[label="0.0673401;20pkt 20fpkt"];
957--9034[label="0.833333;5pkt 5fpkt"];
957--9107[label="0.00746269;1pkt 1fpkt"];
957--10015[label="0.912281;52pkt 52fpkt"];
957--10072[label="0.88;44pkt 44fpkt"];
957--10501[label="1;1pkt 1fpkt"];
957--10533[label="0.222222;2pkt 2fpkt"];
957--10891[label="0.027027;1pkt 1fpkt"];
957--11064[label="1;9pkt 9fpkt"];
957--11183[label="0.8;4pkt 4fpkt"];
957--11965[label="0.571429;12pkt 12fpkt"];
957--12029[label="0.1;1pkt 1fpkt"];
957--12229[label="0.00952381;1pkt 1fpkt"];
957--12316[label="1;1pkt 1fpkt"];
957--12405[label="0.0238095;2pkt 2fpkt"];
957--12422[label="0.0232558;1pkt 1fpkt"];
957--12826[label="0.0285714;1pkt 1fpkt"];
957--13257[label="0.5;5pkt 5fpkt"];
957--13542[label="0.833333;5pkt 5fpkt"];
957--14139[label="0.88;44pkt 44fpkt"];
957--14795[label="0.8;4pkt 4fpkt"];
957--15262[label="0.571429;12pkt 12fpkt"];
957--15300[label="0.1;1pkt 1fpkt"];
957--15417[label="0.00952381;1pkt 1fpkt"];
957--15473[label="1;1pkt 1fpkt"];
957--15523[label="0.0238095;2pkt 2fpkt"];
957--15534[label="0.0232558;1pkt 1fpkt"];
957--15996[label="0.5;5pkt 5fpkt"];
957--16178[label="0.833333;5pkt 5fpkt"];
957--17228[label="0.571429;12pkt 12fpkt"];
957--17344[label="1;1pkt 1fpkt"];
957--17372[label="0.0238095;2pkt 2fpkt"];
957--17661[label="0.5;5pkt 5fpkt"];
1129--1216[label="1;2pkt 2fpkt"];
1129--2837[label="0.0123457;2pkt 2fpkt"];
1129--2892[label="0.741228;169pkt 169fpkt"];
1129--3826[label="0.00318471;1pkt 1fpkt"];
1129--3866[label="0.00318471;1pkt 1fpkt"];
1129--5163[label="0.701299;54pkt 54fpkt"];
1129--6762[label="1;314pkt 314fpkt"];
1129--8884[label="0.0859873;27pkt 27fpkt"];
1129--8894[label="0.0573248;18pkt 18fpkt"];
1129--8895[label="0.00318471;1pkt 1fpkt"];
1129--8902[label="0.0828025;26pkt 26fpkt"];
1129--8909[label="0.00636943;2pkt 2fpkt"];
1129--12405[label="0.642857;54pkt 54fpkt"];
1129--12422[label="0.139535;6pkt 6fpkt"];
1129--13129[label="0.00318471;1pkt 1fpkt"];
1129--15523[label="0.642857;54pkt 54fpkt"];
1129--15534[label="0.139535;6pkt 6fpkt"];
1129--17372[label="0.642857;54pkt 54fpkt"];
1216--6762[label="1;2pkt 2fpkt"];
1216--8884[label="0.5;1pkt 1fpkt"];
1436--6562[label="0.0588235;1pkt 1fpkt"];
1436--6585[label="0.235294;4pkt 4fpkt"];
1436--7611[label="0.647059;11pkt 11fpkt"];
1436--8657[label="0.0588235;1pkt 1fpkt"];
1436--8678[label="0.235294;4pkt 4fpkt"];
1436--8884[label="0.176471;3pkt 3fpkt"];
1436--8894[label="0.0588235;1pkt 1fpkt"];
1577--7611[label="1;14pkt 14fpkt"];
1577--8884[label="0.571429;8pkt 8fpkt"];
1577--10396[label="1;13pkt 13fpkt"];
1577--14331[label="1;13pkt 13fpkt"];
1577--16678[label="1;13pkt 13fpkt"];
1647--6564[label="0.142857;1pkt 1fpkt"];
1647--7611[label="0.857143;6pkt 6fpkt"];
1647--8755[label="0.142857;1pkt 1fpkt"];
1647--8894[label="0.428571;3pkt 3fpkt"];
1647--9296[label="1;7pkt 7fpkt"];
2395--6585[label="0.0967742;3pkt 3fpkt"];
2395--6608[label="0.0322581;1pkt 1fpkt"];
2395--7186[label="0.0322581;1pkt 1fpkt"];
2395--7611[label="0.322581;10pkt 10fpkt"];
2395--8233[label="1;15pkt 15fpkt"];
2395--8678[label="0.0645161;2pkt 2fpkt"];
2395--8884[label="0.0322581;1pkt 1fpkt"];
2395--8894[label="0.0322581;1pkt 1fpkt"];
2395--8902[label="0.0322581;1pkt 1fpkt"];
2478--7611[label="1;13pkt 13fpkt"];
2478--8884[label="0.923077;12pkt 12fpkt"];
2522--7611[label="1;30pkt 30fpkt"];
2522--8884[label="0.466667;14pkt 14fpkt"];
2583--7611[label="1;13pkt 13fpkt"];
2591--7611[label="1;14pkt 14fpkt"];
2591--12206[label="1;14pkt 14fpkt"];
2591--15404[label="1;14pkt 14fpkt"];
2591--17305[label="1;14pkt 14fpkt"];
2892--2902[label="0.00438596;1pkt 1fpkt"];
2892--4051[label="0.00438596;1pkt 1fpkt"];
2892--6762[label="0.741228;169pkt 169fpkt"];
2892--8052[label="0.00438596;1pkt 1fpkt"];
2892--8307[label="0.00438596;1pkt 1fpkt"];
2892--8883[label="0.00877193;2pkt 2fpkt"];
2892--8884[label="0.0877193;20pkt 20fpkt"];
2892--8894[label="0.0526316;12pkt 12fpkt"];
2892--8902[label="0.0350877;8pkt 8fpkt"];
2892--8909[label="0.100877;23pkt 23fpkt"];
3049--6585[label="0.136364;6pkt 6fpkt"];
3049--7611[label="0.863636;38pkt 38fpkt"];
3049--8678[label="0.0454545;2pkt 2fpkt"];
3049--8894[label="0.0227273;1pkt 1fpkt"];
3116--7611[label="1;18pkt 18fpkt"];
3116--8884[label="0.0555556;1pkt 1fpkt"];
3276--7611[label="1;27pkt 27fpkt"];
4325--7611[label="1;26pkt 26fpkt"];
4325--8894[label="0.192308;5pkt 5fpkt"];
4325--12720[label="1;26pkt 26fpkt"];
4561--7611[label="1;15pkt 15fpkt"];
4561--12404[label="1;15pkt 15fpkt"];
4561--15522[label="1;15pkt 15fpkt"];
4561--17371[label="1;15pkt 15fpkt"];
5163--6562[label="0.0649351;5pkt 5fpkt"];
5163--6608[label="0.0649351;5pkt 5fpkt"];
5163--6762[label="0.701299;54pkt 54fpkt"];
5163--7611[label="0.116883;9pkt 9fpkt"];
5163--8657[label="0.0649351;5pkt 5fpkt"];
5163--8884[label="0.0909091;7pkt 7fpkt"];
5163--8902[label="0.0519481;4pkt 4fpkt"];
5163--12405[label="1;77pkt 77fpkt"];
5163--15523[label="1;77pkt 77fpkt"];
5163--17372[label="1;77pkt 77fpkt"];
5330--6723[label="0.456522;21pkt 21fpkt"];
5330--8617[label="1;42pkt 42fpkt"];
5330--8884[label="0.0434783;2pkt 2fpkt"];
5330--8894[label="0.0869565;4pkt 4fpkt"];
5330--8902[label="0.152174;7pkt 7fpkt"];
5330--8909[label="0.0869565;4pkt 4fpkt"];
5330--10072[label="1;46pkt 46fpkt"];
5330--14139[label="1;46pkt 46fpkt"];
5514--7611[label="1;28pkt 28fpkt"];
5964--6723[label="0.298246;17pkt 17fpkt"];
5964--7611[label="0.0877193;5pkt 5fpkt"];
5964--8902[label="0.157895;9pkt 9fpkt"];
5964--8909[label="0.140351;8pkt 8fpkt"];
5964--10015[label="1;57pkt 57fpkt"];
6086--8909[label="0.6;18pkt 18fpkt"];
6086--9286[label="1;30pkt 30fpkt"];
6086--13679[label="1;30pkt 30fpkt"];
6086--16261[label="1;30pkt 30fpkt"];
6087--8909[label="0.5;1pkt 1fpkt"];
6087--11988[label="0.5;1pkt 1fpkt"];
6087--15275[label="0.5;1pkt 1fpkt"];
6138--8909[label="0.428571;6pkt 6fpkt"];
6138--12524[label="1;13pkt 13fpkt"];
6138--15588[label="1;13pkt 13fpkt"];
6450--8909[label="1;12pkt 12fpkt"];
6450--10622[label="1;12pkt 12fpkt"];
6450--14464[label="1;12pkt 12fpkt"];
6450--16766[label="1;12pkt 12fpkt"];
6508--13012[label="1;34pkt 34fpkt"];
6723--8617[label="0.5;21pkt 21fpkt"];
6723--8884[label="0.0490798;8pkt 8fpkt"];
6723--8894[label="0.128834;21pkt 21fpkt"];
6723--8902[label="0.00613497;1pkt 1fpkt"];
6723--8909[label="0.00613497;1pkt 1fpkt"];
6723--9034[label="0.5;3pkt 3fpkt"];
6723--9107[label="0.00746269;1pkt 1fpkt"];
6723--10015[label="0.298246;17pkt 17fpkt"];
6723--10072[label="0.42;21pkt 21fpkt"];
6723--10501[label="1;1pkt 1fpkt"];
6723--11064[label="1;9pkt 9fpkt"];
6723--11183[label="0.8;4pkt 4fpkt"];
6723--11965[label="0.571429;12pkt 12fpkt"];
6723--12029[label="0.1;1pkt 1fpkt"];
6723--12229[label="0.00952381;1pkt 1fpkt"];
6723--12316[label="1;1pkt 1fpkt"];
6723--12826[label="0.0285714;1pkt 1fpkt"];
6723--13257[label="0.5;5pkt 5fpkt"];
6723--13542[label="0.5;3pkt 3fpkt"];
6723--14139[label="0.42;21pkt 21fpkt"];
6723--14795[label="0.8;4pkt 4fpkt"];
6723--15262[label="0.571429;12pkt 12fpkt"];
6723--15300[label="0.1;1pkt 1fpkt"];
6723--15417[label="0.00952381;1pkt 1fpkt"];
6723--15473[label="1;1pkt 1fpkt"];
6723--15996[label="0.5;5pkt 5fpkt"];
6723--16178[label="0.5;3pkt 3fpkt"];
6723--17228[label="0.571429;12pkt 12fpkt"];
6723--17344[label="1;1pkt 1fpkt"];
6723--17661[label="0.5;5pkt 5fpkt"];
6762--8884[label="0.0859873;27pkt 27fpkt"];
6762--8894[label="0.0573248;18pkt 18fpkt"];
6762--8895[label="0.00318471;1pkt 1fpkt"];
6762--8902[label="0.0828025;26pkt 26fpkt"];
6762--8909[label="0.00636943;2pkt 2fpkt"];
6762--12405[label="0.642857;54pkt 54fpkt"];
6762--12422[label="0.139535;6pkt 6fpkt"];
6762--13129[label="0.00318471;1pkt 1fpkt"];
6762--15523[label="0.642857;54pkt 54fpkt"];
6762--15534[label="0.139535;6pkt 6fpkt"];
6762--17372[label="0.642857;54pkt 54fpkt"];
7611--8233[label="0.666667;10pkt 10fpkt"];
7611--8884[label="0.091024;288pkt 288fpkt"];
7611--8894[label="0.0888116;281pkt 281fpkt"];
7611--8902[label="0.00442478;14pkt 14fpkt"];
7611--8909[label="0.00316056;10pkt 10fpkt"];
7611--8983[label="1;6pkt 6fpkt"];
7611--9019[label="1;6pkt 6fpkt"];
7611--9065[label="1;6pkt 6fpkt"];
7611--9159[label="0.111111;2pkt 2fpkt"];
7611--9182[label="1;7pkt 7fpkt"];
7611--9215[label="1;6pkt 6fpkt"];
7611--9244[label="0.538462;7pkt 7fpkt"];
7611--9296[label="0.8;8pkt 8fpkt"];
7611--9370[label="1;13pkt 13fpkt"];
7611--9387[label="1;6pkt 6fpkt"];
7611--9395[label="1;6pkt 6fpkt"];
7611--9564[label="1;7pkt 7fpkt"];
7611--9566[label="1;6pkt 6fpkt"];
7611--9578[label="1;7pkt 7fpkt"];
7611--9603[label="0.2;1pkt 1fpkt"];
7611--9606[label="1;6pkt 6fpkt"];
7611--9626[label="0.0425532;2pkt 2fpkt"];
7611--9817[label="0.5;30pkt 30fpkt"];
7611--9863[label="1;7pkt 7fpkt"];
7611--9909[label="1;16pkt 16fpkt"];
7611--9942[label="1;9pkt 9fpkt"];
7611--9975[label="1;6pkt 6fpkt"];
7611--9984[label="1;6pkt 6fpkt"];
7611--10015[label="0.0877193;5pkt 5fpkt"];
7611--10101[label="1;6pkt 6fpkt"];
7611--10130[label="1;12pkt 12fpkt"];
7611--10137[label="1;11pkt 11fpkt"];
7611--10183[label="1;6pkt 6fpkt"];
7611--10217[label="0.9375;15pkt 15fpkt"];
7611--10242[label="1;13pkt 13fpkt"];
7611--10262[label="1;9pkt 9fpkt"];
7611--10316[label="1;7pkt 7fpkt"];
7611--10396[label="1;13pkt 13fpkt"];
7611--10400[label="1;7pkt 7fpkt"];
7611--10471[label="1;6pkt 6fpkt"];
7611--10499[label="1;13pkt 13fpkt"];
7611--10574[label="1;6pkt 6fpkt"];
7611--10644[label="1;7pkt 7fpkt"];
7611--10839[label="1;6pkt 6fpkt"];
7611--10869[label="0.666667;6pkt 6fpkt"];
7611--10900[label="1;19pkt 19fpkt"];
7611--10982[label="1;6pkt 6fpkt"];
7611--11052[label="1;5pkt 5fpkt"];
7611--11123[label="1;10pkt 10fpkt"];
7611--11169[label="1;6pkt 6fpkt"];
7611--11183[label="0.2;1pkt 1fpkt"];
7611--11221[label="1;6pkt 6fpkt"];
7611--11266[label="1;6pkt 6fpkt"];
7611--11452[label="1;6pkt 6fpkt"];
7611--11525[label="1;6pkt 6fpkt"];
7611--11582[label="1;10pkt 10fpkt"];
7611--11586[label="1;6pkt 6fpkt"];
7611--11693[label="1;6pkt 6fpkt"];
7611--11797[label="1;7pkt 7fpkt"];
7611--11879[label="1;6pkt 6fpkt"];
7611--11910[label="0.7;7pkt 7fpkt"];
7611--11921[label="1;7pkt 7fpkt"];
7611--11965[label="0.428571;9pkt 9fpkt"];
7611--11977[label="1;12pkt 12fpkt"];
7611--11988[label="0.5;1pkt 1fpkt"];
7611--12018[label="1;15pkt 15fpkt"];
7611--12029[label="0.6;6pkt 6fpkt"];
7611--12066[label="1;6pkt 6fpkt"];
7611--12155[label="1;4pkt 4fpkt"];
7611--12206[label="1;14pkt 14fpkt"];
7611--12285[label="1;6pkt 6fpkt"];
7611--12404[label="1;15pkt 15fpkt"];
7611--12405[label="0.107143;9pkt 9fpkt"];
7611--12422[label="0.372093;16pkt 16fpkt"];
7611--12491[label="1;6pkt 6fpkt"];
7611--12544[label="0.2;1pkt 1fpkt"];
7611--12557[label="1;9pkt 9fpkt"];
7611--12649[label="1;14pkt 14fpkt"];
7611--12655[label="1;15pkt 15fpkt"];
7611--12720[label="0.777778;28pkt 28fpkt"];
7611--12737[label="0.571429;4pkt 4fpkt"];
7611--12742[label="1;8pkt 8fpkt"];
7611--12808[label="1;6pkt 6fpkt"];
7611--12812[label="1;12pkt 12fpkt"];
7611--12838[label="1;12pkt 12fpkt"];
7611--12848[label="1;12pkt 12fpkt"];
7611--12858[label="1;15pkt 15fpkt"];
7611--12941[label="1;10pkt 10fpkt"];
7611--12985[label="1;6pkt 6fpkt"];
7611--13096[label="0.0588235;1pkt 1fpkt"];
7611--13139[label="0.368421;21pkt 21fpkt"];
7611--13167[label="0.833333;5pkt 5fpkt"];
7611--13196[label="1;14pkt 14fpkt"];
7611--13244[label="1;6pkt 6fpkt"];
7611--13307[label="1;7pkt 7fpkt"];
7611--13312[label="1;6pkt 6fpkt"];
7611--13358[label="1;11pkt 11fpkt"];
7611--13374[label="1;5pkt 5fpkt"];
7611--13476[label="1;10pkt 10fpkt"];
7611--13518[label="1;6pkt 6fpkt"];
7611--13535[label="1;5pkt 5fpkt"];
7611--13557[label="1;7pkt 7fpkt"];
7611--13636[label="1;6pkt 6fpkt"];
7611--13736[label="1;6pkt 6fpkt"];
7611--13741[label="1;5pkt 5fpkt"];
7611--13845[label="1;7pkt 7fpkt"];
7611--14020[label="1;7pkt 7fpkt"];
7611--14047[label="1;16pkt 16fpkt"];
7611--14068[label="1;9pkt 9fpkt"];
7611--14088[label="1;6pkt 6fpkt"];
7611--14171[label="1;12pkt 12fpkt"];
7611--14172[label="1;11pkt 11fpkt"];
7611--14199[label="1;6pkt 6fpkt"];
7611--14223[label="0.9375;15pkt 15fpkt"];
7611--14237[label="1;13pkt 13fpkt"];
7611--14331[label="1;13pkt 13fpkt"];
7611--14375[label="1;6pkt 6fpkt"];
7611--14591[label="1;6pkt 6fpkt"];
7611--14631[label="1;19pkt 19fpkt"];
7611--14720[label="1;5pkt 5fpkt"];
7611--14764[label="1;10pkt 10fpkt"];
7611--14788[label="1;6pkt 6fpkt"];
7611--14795[label="0.2;1pkt 1fpkt"];
7611--14827[label="1;12pkt 12fpkt"];
7611--14846[label="1;6pkt 6fpkt"];
7611--14952[label="1;6pkt 6fpkt"];
7611--14995[label="1;6pkt 6fpkt"];
7611--15024[label="1;10pkt 10fpkt"];
7611--15094[label="1;6pkt 6fpkt"];
7611--15262[label="0.428571;9pkt 9fpkt"];
7611--15270[label="1;12pkt 12fpkt"];
7611--15275[label="0.5;1pkt 1fpkt"];
7611--15294[label="1;15pkt 15fpkt"];
7611--15300[label="0.6;6pkt 6fpkt"];
7611--15320[label="1;6pkt 6fpkt"];
7611--15375[label="1;4pkt 4fpkt"];
7611--15404[label="1;14pkt 14fpkt"];
7611--15522[label="1;15pkt 15fpkt"];
7611--15523[label="0.107143;9pkt 9fpkt"];
7611--15534[label="0.372093;16pkt 16fpkt"];
7611--15569[label="1;6pkt 6fpkt"];
7611--15600[label="0.2;1pkt 1fpkt"];
7611--15606[label="1;9pkt 9fpkt"];
7611--15716[label="0.571429;4pkt 4fpkt"];
7611--15718[label="1;8pkt 8fpkt"];
7611--15822[label="1;10pkt 10fpkt"];
7611--15849[label="1;6pkt 6fpkt"];
7611--15934[label="0.368421;21pkt 21fpkt"];
7611--15951[label="0.833333;5pkt 5fpkt"];
7611--16024[label="1;7pkt 7fpkt"];
7611--16062[label="1;5pkt 5fpkt"];
7611--16129[label="1;10pkt 10fpkt"];
7611--16173[label="1;6pkt 6fpkt"];
7611--16294[label="1;6pkt 6fpkt"];
7611--16472[label="1;7pkt 7fpkt"];
7611--16510[label="1;9pkt 9fpkt"];
7611--16524[label="1;6pkt 6fpkt"];
7611--16598[label="1;6pkt 6fpkt"];
7611--16613[label="0.9375;15pkt 15fpkt"];
7611--16621[label="1;13pkt 13fpkt"];
7611--16678[label="1;13pkt 13fpkt"];
7611--16843[label="1;6pkt 6fpkt"];
7611--16863[label="1;19pkt 19fpkt"];
7611--16918[label="1;5pkt 5fpkt"];
7611--16943[label="1;10pkt 10fpkt"];
7611--16956[label="1;6pkt 6fpkt"];
7611--16974[label="1;12pkt 12fpkt"];
7611--17072[label="1;6pkt 6fpkt"];
7611--17088[label="1;10pkt 10fpkt"];
7611--17129[label="1;6pkt 6fpkt"];
7611--17228[label="0.428571;9pkt 9fpkt"];
7611--17234[label="1;12pkt 12fpkt"];
7611--17305[label="1;14pkt 14fpkt"];
7611--17371[label="1;15pkt 15fpkt"];
7611--17372[label="0.107143;9pkt 9fpkt"];
7611--17419[label="0.2;1pkt 1fpkt"];
7611--17424[label="1;9pkt 9fpkt"];
7611--17480[label="1;8pkt 8fpkt"];
7611--17544[label="1;10pkt 10fpkt"];
7611--17564[label="1;6pkt 6fpkt"];
7611--17615[label="0.368421;21pkt 21fpkt"];
7611--17677[label="1;7pkt 7fpkt"];
7611--17741[label="1;10pkt 10fpkt"];
8233--8678[label="0.133333;2pkt 2fpkt"];
8233--8884[label="0.0666667;1pkt 1fpkt"];
8233--8894[label="0.0666667;1pkt 1fpkt"];
8617--8884[label="0.047619;2pkt 2fpkt"];
8617--8894[label="0.0952381;4pkt 4fpkt"];
8617--8902[label="0.166667;7pkt 7fpkt"];
8617--8909[label="0.0952381;4pkt 4fpkt"];
8617--10072[label="1;42pkt 42fpkt"];
8617--14139[label="1;42pkt 42fpkt"];
8961--13509[label="1;11pkt 11fpkt"];
8961--16152[label="1;12pkt 12fpkt"];
8983--13518[label="1;6pkt 6fpkt"];
9019--13535[label="1;5pkt 5fpkt"];
9019--16173[label="1;6pkt 6fpkt"];
9034--13542[label="1;6pkt 6fpkt"];
9034--16178[label="1;6pkt 6fpkt"];
9065--13557[label="1;6pkt 6fpkt"];
9083--13566[label="1;5pkt 5fpkt"];
9193--13624[label="1;6pkt 6fpkt"];
9215--13636[label="1;6pkt 6fpkt"];
9286--13679[label="1;30pkt 30fpkt"];
9286--16261[label="1;30pkt 30fpkt"];
9387--13736[label="1;6pkt 6fpkt"];
9395--13741[label="1;5pkt 5fpkt"];
9395--16294[label="1;6pkt 6fpkt"];
9397--13743[label="1;13pkt 13fpkt"];
9555--13839[label="1;14pkt 14fpkt"];
9561--13842[label="1;6pkt 6fpkt"];
9561--16357[label="1;6pkt 6fpkt"];
9564--13845[label="1;7pkt 7fpkt"];
9587--13856[label="1;9pkt 9fpkt"];
9633--13883[label="1;5pkt 5fpkt"];
9633--16380[label="1;6pkt 6fpkt"];
9638--13888[label="1;5pkt 5fpkt"];
9638--16383[label="1;6pkt 6fpkt"];
9757--13960[label="1;8pkt 8fpkt"];
9757--16436[label="1;8pkt 8fpkt"];
9771--13971[label="1;7pkt 7fpkt"];
9771--16442[label="1;7pkt 7fpkt"];
9810--13993[label="1;2pkt 2fpkt"];
9810--16453[label="1;2pkt 2fpkt"];
9838--14008[label="1;12pkt 12fpkt"];
9838--16465[label="1;12pkt 12fpkt"];
9863--14020[label="1;7pkt 7fpkt"];
9863--16472[label="1;7pkt 7fpkt"];
9909--14047[label="1;16pkt 16fpkt"];
9942--14068[label="1;9pkt 9fpkt"];
9942--16510[label="1;9pkt 9fpkt"];
9975--14088[label="1;6pkt 6fpkt"];
9975--16524[label="1;6pkt 6fpkt"];
10042--14123[label="1;6pkt 6fpkt"];
10042--16542[label="1;6pkt 6fpkt"];
10072--14139[label="1;50pkt 50fpkt"];
10120--14168[label="1;6pkt 6fpkt"];
10120--16578[label="1;6pkt 6fpkt"];
10130--14171[label="1;12pkt 12fpkt"];
10137--14172[label="1;11pkt 11fpkt"];
10146--14179[label="1;8pkt 8fpkt"];
10146--16585[label="1;8pkt 8fpkt"];
10183--14199[label="1;6pkt 6fpkt"];
10183--16598[label="1;6pkt 6fpkt"];
10213--14220[label="1;6pkt 6fpkt"];
10213--16611[label="1;6pkt 6fpkt"];
10217--14223[label="1;16pkt 16fpkt"];
10217--16613[label="1;16pkt 16fpkt"];
10242--14237[label="1;13pkt 13fpkt"];
10242--16621[label="1;13pkt 13fpkt"];
10321--14282[label="1;9pkt 9fpkt"];
10396--14331[label="1;13pkt 13fpkt"];
10396--16678[label="1;13pkt 13fpkt"];
10471--14375[label="1;6pkt 6fpkt"];
10486--14383[label="1;11pkt 11fpkt"];
10486--16714[label="1;11pkt 11fpkt"];
10559--14421[label="1;6pkt 6fpkt"];
10559--16736[label="1;6pkt 6fpkt"];
10622--14464[label="1;12pkt 12fpkt"];
10622--16766[label="1;12pkt 12fpkt"];
10739--14534[label="1;10pkt 10fpkt"];
10839--14591[label="1;6pkt 6fpkt"];
10839--16843[label="1;6pkt 6fpkt"];
10900--14631[label="1;19pkt 19fpkt"];
10900--16863[label="1;19pkt 19fpkt"];
11047--14719[label="1;6pkt 6fpkt"];
11047--16917[label="1;6pkt 6fpkt"];
11052--14720[label="1;5pkt 5fpkt"];
11052--16918[label="1;5pkt 5fpkt"];
11077--14734[label="1;6pkt 6fpkt"];
11077--16926[label="1;6pkt 6fpkt"];
11123--14764[label="1;10pkt 10fpkt"];
11123--16943[label="1;10pkt 10fpkt"];
11169--14788[label="1;6pkt 6fpkt"];
11169--16956[label="1;6pkt 6fpkt"];
11183--14795[label="1;5pkt 5fpkt"];
11203--14809[label="1;6pkt 6fpkt"];
11255--14839[label="1;12pkt 12fpkt"];
11255--16982[label="1;12pkt 12fpkt"];
11262--14843[label="1;14pkt 14fpkt"];
11262--16986[label="1;14pkt 14fpkt"];
11266--14846[label="1;6pkt 6fpkt"];
11281--14853[label="1;6pkt 6fpkt"];
11321--14873[label="1;24pkt 24fpkt"];
11321--17002[label="1;24pkt 24fpkt"];
11343--14881[label="1;11pkt 11fpkt"];
11343--17007[label="1;11pkt 11fpkt"];
11436--14941[label="1;6pkt 6fpkt"];
11436--17042[label="1;6pkt 6fpkt"];
11452--14952[label="1;6pkt 6fpkt"];
11477--14968[label="1;15pkt 15fpkt"];
11477--17058[label="1;15pkt 15fpkt"];
11525--14995[label="1;6pkt 6fpkt"];
11525--17072[label="1;6pkt 6fpkt"];
11582--15024[label="1;10pkt 10fpkt"];
11582--17088[label="1;10pkt 10fpkt"];
11662--15075[label="1;20pkt 20fpkt"];
11693--15094[label="1;6pkt 6fpkt"];
11693--17129[label="1;6pkt 6fpkt"];
11730--15118[label="1;6pkt 6fpkt"];
11730--17143[label="1;6pkt 6fpkt"];
11812--15171[label="1;10pkt 10fpkt"];
11812--17181[label="1;10pkt 10fpkt"];
11822--15176[label="1;5pkt 5fpkt"];
11822--17185[label="1;5pkt 5fpkt"];
11965--15262[label="1;21pkt 21fpkt"];
11965--17228[label="1;21pkt 21fpkt"];
11977--15270[label="1;12pkt 12fpkt"];
11977--17234[label="1;12pkt 12fpkt"];
11988--15275[label="1;2pkt 2fpkt"];
12018--15294[label="1;15pkt 15fpkt"];
12029--15300[label="1;10pkt 10fpkt"];
12066--15320[label="1;6pkt 6fpkt"];
12155--15375[label="1;4pkt 4fpkt"];
12163--15380[label="1;6pkt 6fpkt"];
12163--17297[label="1;6pkt 6fpkt"];
12206--15404[label="1;14pkt 14fpkt"];
12206--17305[label="1;14pkt 14fpkt"];
12217--15410[label="1;13pkt 13fpkt"];
12217--17308[label="1;13pkt 13fpkt"];
12232--15420[label="1;6pkt 6fpkt"];
12232--17315[label="1;6pkt 6fpkt"];
12314--15471[label="1;6pkt 6fpkt"];
12314--17342[label="1;6pkt 6fpkt"];
12316--15473[label="1;1pkt 1fpkt"];
12316--17344[label="1;1pkt 1fpkt"];
12369--15505[label="1;6pkt 6fpkt"];
12369--17363[label="1;6pkt 6fpkt"];
12404--15522[label="1;15pkt 15fpkt"];
12404--17371[label="1;15pkt 15fpkt"];
12405--15523[label="1;84pkt 84fpkt"];
12405--17372[label="1;84pkt 84fpkt"];
12422--15534[label="1;43pkt 43fpkt"];
12491--15569[label="1;6pkt 6fpkt"];
12522--15587[label="1;6pkt 6fpkt"];
12522--17409[label="1;6pkt 6fpkt"];
12524--15588[label="1;13pkt 13fpkt"];
12544--15600[label="1;5pkt 5fpkt"];
12544--17419[label="1;5pkt 5fpkt"];
12557--15606[label="1;9pkt 9fpkt"];
12557--17424[label="1;9pkt 9fpkt"];
12647--15662[label="1;8pkt 8fpkt"];
12647--17459[label="1;8pkt 8fpkt"];
12661--15670[label="1;11pkt 11fpkt"];
12661--17462[label="1;11pkt 11fpkt"];
12737--15716[label="1;7pkt 7fpkt"];
12742--15718[label="1;8pkt 8fpkt"];
12742--17480[label="1;8pkt 8fpkt"];
12757--15723[label="1;7pkt 7fpkt"];
12757--17484[label="1;7pkt 7fpkt"];
12941--15822[label="1;10pkt 10fpkt"];
12941--17544[label="1;10pkt 10fpkt"];
12953--15831[label="1;12pkt 12fpkt"];
12953--17550[label="1;12pkt 12fpkt"];
12985--15849[label="1;6pkt 6fpkt"];
12985--17564[label="1;6pkt 6fpkt"];
13009--15863[label="1;6pkt 6fpkt"];
13009--17573[label="1;6pkt 6fpkt"];
13054--15885[label="1;8pkt 8fpkt"];
13139--15934[label="1;57pkt 57fpkt"];
13139--17615[label="1;57pkt 57fpkt"];
13165--15950[label="1;7pkt 7fpkt"];
13165--17630[label="1;7pkt 7fpkt"];
13167--15951[label="1;6pkt 6fpkt"];
13276--16005[label="1;12pkt 12fpkt"];
13276--17668[label="1;12pkt 12fpkt"];
13307--16024[label="1;7pkt 7fpkt"];
13307--17677[label="1;7pkt 7fpkt"];
13374--16062[label="1;5pkt 5fpkt"];
13418--16091[label="1;7pkt 7fpkt"];
13418--17717[label="1;7pkt 7fpkt"];
13423--16094[label="1;13pkt 13fpkt"];
13476--16129[label="1;10pkt 10fpkt"];
13476--17741[label="1;10pkt 10fpkt"];
13487--16136[label="1;7pkt 7fpkt"];
13509--16152[label="1;11pkt 11fpkt"];
13535--16173[label="1;5pkt 5fpkt"];
13542--16178[label="1;6pkt 6fpkt"];
13679--16261[label="1;30pkt 30fpkt"];
13741--16294[label="1;5pkt 5fpkt"];
13842--16357[label="1;6pkt 6fpkt"];
13883--16380[label="1;5pkt 5fpkt"];
13888--16383[label="1;5pkt 5fpkt"];
13960--16436[label="1;8pkt 8fpkt"];
13971--16442[label="1;7pkt 7fpkt"];
13993--16453[label="1;2pkt 2fpkt"];
14008--16465[label="1;12pkt 12fpkt"];
14020--16472[label="1;7pkt 7fpkt"];
14068--16510[label="1;9pkt 9fpkt"];
14088--16524[label="1;6pkt 6fpkt"];
14123--16542[label="1;6pkt 6fpkt"];
14168--16578[label="1;6pkt 6fpkt"];
14179--16585[label="1;8pkt 8fpkt"];
14199--16598[label="1;6pkt 6fpkt"];
14220--16611[label="1;6pkt 6fpkt"];
14223--16613[label="1;16pkt 16fpkt"];
14237--16621[label="1;13pkt 13fpkt"];
14331--16678[label="1;13pkt 13fpkt"];
14383--16714[label="1;11pkt 11fpkt"];
14421--16736[label="1;6pkt 6fpkt"];
14464--16766[label="1;12pkt 12fpkt"];
14591--16843[label="1;6pkt 6fpkt"];
14631--16863[label="1;19pkt 19fpkt"];
14719--16917[label="1;6pkt 6fpkt"];
14720--16918[label="1;5pkt 5fpkt"];
14734--16926[label="1;6pkt 6fpkt"];
14764--16943[label="1;10pkt 10fpkt"];
14788--16956[label="1;6pkt 6fpkt"];
14827--16974[label="1;12pkt 12fpkt"];
14839--16982[label="1;12pkt 12fpkt"];
14843--16986[label="1;14pkt 14fpkt"];
14873--17002[label="1;24pkt 24fpkt"];
14881--17007[label="1;11pkt 11fpkt"];
14941--17042[label="1;6pkt 6fpkt"];
14968--17058[label="1;15pkt 15fpkt"];
14995--17072[label="1;6pkt 6fpkt"];
15024--17088[label="1;10pkt 10fpkt"];
15094--17129[label="1;6pkt 6fpkt"];
15118--17143[label="1;6pkt 6fpkt"];
15171--17181[label="1;10pkt 10fpkt"];
15176--17185[label="1;5pkt 5fpkt"];
15262--17228[label="1;21pkt 21fpkt"];
15270--17234[label="1;12pkt 12fpkt"];
15380--17297[label="1;6pkt 6fpkt"];
15404--17305[label="1;14pkt 14fpkt"];
15410--17308[label="1;13pkt 13fpkt"];
15420--17315[label="1;6pkt 6fpkt"];
15471--17342[label="1;6pkt 6fpkt"];
15473--17344[label="1;1pkt 1fpkt"];
15505--17363[label="1;6pkt 6fpkt"];
15522--17371[label="1;15pkt 15fpkt"];
15523--17372[label="1;84pkt 84fpkt"];
15587--17409[label="1;6pkt 6fpkt"];
15600--17419[label="1;5pkt 5fpkt"];
15606--17424[label="1;9pkt 9fpkt"];
15662--17459[label="1;8pkt 8fpkt"];
15670--17462[label="1;11pkt 11fpkt"];
15718--17480[label="1;8pkt 8fpkt"];
15723--17484[label="1;7pkt 7fpkt"];
15822--17544[label="1;10pkt 10fpkt"];
15831--17550[label="1;12pkt 12fpkt"];
15849--17564[label="1;6pkt 6fpkt"];
15863--17573[label="1;6pkt 6fpkt"];
15934--17615[label="1;57pkt 57fpkt"];
15950--17630[label="1;7pkt 7fpkt"];
16005--17668[label="1;12pkt 12fpkt"];
16024--17677[label="1;7pkt 7fpkt"];
16091--17717[label="1;7pkt 7fpkt"];
16129--17741[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.100" dst_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.2.81.179"/>
    </slice>
    <from sec="1284008660" usec="0"/>
    <to sec="1284009290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.141.174.179"/>
    </slice>
    <from sec="1284008413" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.150.182.179"/>
    </slice>
    <from sec="1284009213" usec="0"/>
    <to sec="1284009230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.72.226.179"/>
    </slice>
    <from sec="1284008856" usec="0"/>
    <to sec="1284008870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.27.148.180"/>
    </slice>
    <from sec="1284008887" usec="0"/>
    <to sec="1284008901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.80.154.180"/>
    </slice>
    <from sec="1284008887" usec="0"/>
    <to sec="1284008966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.225.254.180"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.47.153.181"/>
    </slice>
    <from sec="1284008838" usec="0"/>
    <to sec="1284008915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.134.245.181"/>
    </slice>
    <from sec="1284009291" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.68.40.182"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.241.58.182"/>
    </slice>
    <from sec="1284008797" usec="0"/>
    <to sec="1284008813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.171.53.183"/>
    </slice>
    <from sec="1284008608" usec="0"/>
    <to sec="1284009253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.210.201.183"/>
    </slice>
    <from sec="1284008494" usec="0"/>
    <to sec="1284008507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_813{
style=filled;
color=gray75;
6098[label="96.51.16.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
12390[label="96.51.16.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat813[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.51.16.184:12340, 167.190.108.249:61936}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61936: (50%)&lt;BR/&gt; 12340: (50%)&gt;];
}
6098--12390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.249" dst_port="61936" src_ip="96.51.16.184" src_port="12340"/>
    </slice>
    <from sec="1284009068" usec="0"/>
    <to sec="1284009110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.118.43.184"/>
    </slice>
    <from sec="1284008626" usec="0"/>
    <to sec="1284008640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.160.214.184"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.232.83.185"/>
    </slice>
    <from sec="1284009248" usec="0"/>
    <to sec="1284009272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.8.95.185"/>
    </slice>
    <from sec="1284008923" usec="0"/>
    <to sec="1284008971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.82.148.185"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
1712[label="145.105.80.77;s;657pkt 657fpkt", shape=diamond, color=yellow];
1713[label="203.57.151.28;d;646pkt 646fpkt", shape=diamond, color=yellow];
6896[label="203.57.151.28;d;365pkt 365fpkt", shape=hexagon, color=black];
10432[label="145.105.80.77;657pkt 657fpkt", shape=pentagon, color=darkviolet];
14353[label="145.105.80.77;657pkt 657fpkt", shape=invtriangle, color=brown];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.80.77:*, 203.57.151.28:80}[95.9337%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8323%)&lt;BR/&gt; 443: (0.167673%)&lt;BR/&gt; 54903: (0.100604%)&lt;BR/&gt; 60992: (0.0838364%)&lt;BR/&gt; 60924: (0.0838364%)&gt;];
}
1712--1713[label="0.989164;639pkt 639fpkt"];
1712--3727[label="0.116279;5pkt 5fpkt"];
1712--6896[label="0.983562;359pkt 359fpkt"];
1712--8515[label="0.131579;5pkt 5fpkt"];
1712--8884[label="0.0410959;27pkt 27fpkt"];
1712--8894[label="0.0152207;10pkt 10fpkt"];
1712--8902[label="0.106545;70pkt 70fpkt"];
1712--10432[label="1;657pkt 657fpkt"];
1712--14353[label="1;657pkt 657fpkt"];
1713--2204[label="0.0202703;3pkt 3fpkt"];
1713--3093[label="0.0517241;3pkt 3fpkt"];
1713--6896[label="1;365pkt 365fpkt"];
1713--8884[label="0.0417957;27pkt 27fpkt"];
1713--8894[label="0.0170279;11pkt 11fpkt"];
1713--8902[label="0.108359;70pkt 70fpkt"];
1713--8909[label="0.00154799;1pkt 1fpkt"];
1713--10432[label="0.989164;639pkt 639fpkt"];
1713--14353[label="0.989164;639pkt 639fpkt"];
6896--8884[label="0.0739726;27pkt 27fpkt"];
6896--8894[label="0.030137;11pkt 11fpkt"];
6896--10432[label="0.983562;359pkt 359fpkt"];
6896--14353[label="0.983562;359pkt 359fpkt"];
10432--14353[label="1;657pkt 657fpkt"];
</description>
    <slice>
      <filter dst_ip="203.57.151.28" dst_port="80" src_ip="145.105.80.77"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.34.186"/>
    </slice>
    <from sec="1284009161" usec="0"/>
    <to sec="1284009288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.193.45.186"/>
    </slice>
    <from sec="1284008645" usec="0"/>
    <to sec="1284008688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.22.250.186"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.90.81.187"/>
    </slice>
    <from sec="1284008850" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.59.154.187"/>
    </slice>
    <from sec="1284008478" usec="0"/>
    <to sec="1284009269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.97.174.187"/>
    </slice>
    <from sec="1284008824" usec="0"/>
    <to sec="1284008902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.172.225.187"/>
    </slice>
    <from sec="1284008774" usec="0"/>
    <to sec="1284008795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.77.49.188"/>
    </slice>
    <from sec="1284008978" usec="0"/>
    <to sec="1284009062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.27.181.188"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284008573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.161.201.188"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.118.29.189"/>
    </slice>
    <from sec="1284008935" usec="0"/>
    <to sec="1284008994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.73.26.191"/>
    </slice>
    <from sec="1284008958" usec="0"/>
    <to sec="1284008994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.129.130.191"/>
    </slice>
    <from sec="1284009100" usec="0"/>
    <to sec="1284009134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.48.47.192"/>
    </slice>
    <from sec="1284009053" usec="0"/>
    <to sec="1284009080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.145.192"/>
    </slice>
    <from sec="1284008753" usec="0"/>
    <to sec="1284008848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.73.181.192"/>
    </slice>
    <from sec="1284008456" usec="0"/>
    <to sec="1284008464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.166.203.192"/>
    </slice>
    <from sec="1284008425" usec="0"/>
    <to sec="1284009292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.180.3.193"/>
    </slice>
    <from sec="1284008716" usec="0"/>
    <to sec="1284008746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.62.193"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.106.241.193"/>
    </slice>
    <from sec="1284008696" usec="0"/>
    <to sec="1284008705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.124.58.195"/>
    </slice>
    <from sec="1284009274" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.223.136.195"/>
    </slice>
    <from sec="1284009035" usec="0"/>
    <to sec="1284009046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.247.164.195"/>
    </slice>
    <from sec="1284008453" usec="0"/>
    <to sec="1284008512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.162.84.196"/>
    </slice>
    <from sec="1284008976" usec="0"/>
    <to sec="1284009025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.126.150.196"/>
    </slice>
    <from sec="1284008973" usec="0"/>
    <to sec="1284008987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.243.208.196"/>
    </slice>
    <from sec="1284008738" usec="0"/>
    <to sec="1284008749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.248.196"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.253.196"/>
    </slice>
    <from sec="1284008681" usec="0"/>
    <to sec="1284008770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.147.58.197"/>
    </slice>
    <from sec="1284008718" usec="0"/>
    <to sec="1284008723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.95.166.197"/>
    </slice>
    <from sec="1284009110" usec="0"/>
    <to sec="1284009117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.44.17.198"/>
    </slice>
    <from sec="1284009268" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.185.5.199"/>
    </slice>
    <from sec="1284008674" usec="0"/>
    <to sec="1284008712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.104.31.199"/>
    </slice>
    <from sec="1284008889" usec="0"/>
    <to sec="1284008905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.49.83.199"/>
    </slice>
    <from sec="1284008725" usec="0"/>
    <to sec="1284008734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.121.163.199"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.173.189.200"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.22.202"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.37.241.202"/>
    </slice>
    <from sec="1284008637" usec="0"/>
    <to sec="1284008642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.91.184.204"/>
    </slice>
    <from sec="1284008821" usec="0"/>
    <to sec="1284008885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
4197[label="199.56.58.98;d;101pkt 101fpkt", shape=diamond, color=yellow];
5883[label="169.118.239.204;s;100pkt 100fpkt", shape=diamond, color=yellow];
12735[label="169.118.239.204;109pkt 109fpkt", shape=pentagon, color=darkviolet];
15714[label="169.118.239.204;109pkt 109fpkt", shape=invtriangle, color=brown];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.118.239.204:*, 199.56.58.98:80}[81.9549%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8807%)&lt;BR/&gt; 60985: (0.477327%)&lt;BR/&gt; 60201: (0.477327%)&lt;BR/&gt; 60200: (0.477327%)&lt;BR/&gt; 60026: (0.477327%)&gt;];
}
4197--5883[label="0.77;77pkt 77fpkt"];
4197--8884[label="0.0792079;8pkt 8fpkt"];
4197--8894[label="0.0693069;7pkt 7fpkt"];
4197--8902[label="0.108911;11pkt 11fpkt"];
4197--12735[label="0.762376;77pkt 77fpkt"];
4197--13129[label="0.00990099;1pkt 1fpkt"];
4197--15714[label="0.762376;77pkt 77fpkt"];
5883--8884[label="0.06;6pkt 6fpkt"];
5883--8894[label="0.05;5pkt 5fpkt"];
5883--8902[label="0.07;7pkt 7fpkt"];
5883--8909[label="0.09;9pkt 9fpkt"];
5883--12735[label="1;100pkt 100fpkt"];
5883--15714[label="1;100pkt 100fpkt"];
12735--15714[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.58.98" dst_port="80" src_ip="169.118.239.204"/>
    </slice>
    <from sec="1284008411" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.32.139.205"/>
    </slice>
    <from sec="1284008425" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.56.194.205"/>
    </slice>
    <from sec="1284009189" usec="0"/>
    <to sec="1284009237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.37.213.205"/>
    </slice>
    <from sec="1284008699" usec="0"/>
    <to sec="1284008800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.0.79.206"/>
    </slice>
    <from sec="1284008476" usec="0"/>
    <to sec="1284008688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.38.102.206"/>
    </slice>
    <from sec="1284008525" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.24.17.207"/>
    </slice>
    <from sec="1284009227" usec="0"/>
    <to sec="1284009252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.160.2.208"/>
    </slice>
    <from sec="1284008783" usec="0"/>
    <to sec="1284008904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.109.10.208"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284008638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.47.117.208"/>
    </slice>
    <from sec="1284008416" usec="0"/>
    <to sec="1284009279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.178.221.208"/>
    </slice>
    <from sec="1284009191" usec="0"/>
    <to sec="1284009204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.119.140.209"/>
    </slice>
    <from sec="1284009151" usec="0"/>
    <to sec="1284009194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.177.162.209"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.90.40.211"/>
    </slice>
    <from sec="1284009145" usec="0"/>
    <to sec="1284009159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.162.57.211"/>
    </slice>
    <from sec="1284008849" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.250.147.211"/>
    </slice>
    <from sec="1284008619" usec="0"/>
    <to sec="1284008676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.14.177.211"/>
    </slice>
    <from sec="1284008860" usec="0"/>
    <to sec="1284008870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.200.114.212"/>
    </slice>
    <from sec="1284009196" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.118.189.213"/>
    </slice>
    <from sec="1284008412" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.13.58.214"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.236.7.215"/>
    </slice>
    <from sec="1284008744" usec="0"/>
    <to sec="1284008784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.172.20.215"/>
    </slice>
    <from sec="1284009206" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.196.79.215"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.201.115.215"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284008994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.203.215"/>
    </slice>
    <from sec="1284008687" usec="0"/>
    <to sec="1284008702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.56.36.216"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.35.147.216"/>
    </slice>
    <from sec="1284009022" usec="0"/>
    <to sec="1284009042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.144.44.218"/>
    </slice>
    <from sec="1284008485" usec="0"/>
    <to sec="1284008549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.246.26.219"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.84.219"/>
    </slice>
    <from sec="1284008739" usec="0"/>
    <to sec="1284008760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.45.56.220"/>
    </slice>
    <from sec="1284008478" usec="0"/>
    <to sec="1284009281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.190.66.220"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.16.74.220"/>
    </slice>
    <from sec="1284009002" usec="0"/>
    <to sec="1284009189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.171.203.222"/>
    </slice>
    <from sec="1284008844" usec="0"/>
    <to sec="1284008855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.5.139.223"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.33.159.223"/>
    </slice>
    <from sec="1284008452" usec="0"/>
    <to sec="1284008461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.101.42.224"/>
    </slice>
    <from sec="1284009069" usec="0"/>
    <to sec="1284009125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.222.222.224"/>
    </slice>
    <from sec="1284009244" usec="0"/>
    <to sec="1284009258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.26.229.224"/>
    </slice>
    <from sec="1284009190" usec="0"/>
    <to sec="1284009200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.43.123.225"/>
    </slice>
    <from sec="1284008596" usec="0"/>
    <to sec="1284008604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.113.128.225"/>
    </slice>
    <from sec="1284008697" usec="0"/>
    <to sec="1284008722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.60.150.225"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
1071[label="167.190.154.249;d;181pkt 181fpkt", shape=diamond, color=yellow];
1975[label="217.20.157.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
6237[label="221.124.86.13;s;3pkt 3fpkt", shape=diamond, color=yellow];
7008[label="167.190.154.249;d;126pkt 126fpkt", shape=hexagon, color=black];
8643[label="221.124.86.13;s;3pkt 3fpkt", shape=hexagon, color=black];
9203[label="221.124.86.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10750[label="221.124.86.94;72pkt 72fpkt", shape=pentagon, color=darkviolet];
13070[label="217.20.157.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13631[label="221.124.86.13;2pkt 2fpkt", shape=invtriangle, color=brown];
15894[label="217.20.157.225;1pkt 1fpkt", shape=invtriangle, color=brown];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.124.86.94:80, 167.190.154.249:*}[33.9623%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.1531%)&lt;BR/&gt; 443: (2.29592%)&lt;BR/&gt; 57854: (1.65816%)&lt;BR/&gt; 45485: (0.765306%)&lt;BR/&gt; 45005: (0.637755%)&gt;];
}
1071--1194[label="0.00552486;1pkt 1fpkt"];
1071--1298[label="0.0165746;3pkt 3fpkt"];
1071--1768[label="0.00591716;1pkt 1fpkt"];
1071--1975[label="1;1pkt 1fpkt"];
1071--2707[label="0.0833333;1pkt 1fpkt"];
1071--2726[label="0.0333333;2pkt 2fpkt"];
1071--2937[label="0.0151515;1pkt 1fpkt"];
1071--2963[label="0.0165746;3pkt 3fpkt"];
1071--3044[label="0.047619;3pkt 3fpkt"];
1071--6237[label="0.666667;2pkt 2fpkt"];
1071--7008[label="1;126pkt 126fpkt"];
1071--8643[label="0.666667;2pkt 2fpkt"];
1071--9203[label="0.5;1pkt 1fpkt"];
1071--9886[label="0.2;1pkt 1fpkt"];
1071--10225[label="0.0165746;3pkt 3fpkt"];
1071--10361[label="0.0882353;3pkt 3fpkt"];
1071--10750[label="0.583333;42pkt 42fpkt"];
1071--12714[label="0.0285714;1pkt 1fpkt"];
1071--12781[label="0.0833333;1pkt 1fpkt"];
1071--13070[label="1;1pkt 1fpkt"];
1071--13293[label="0.0333333;2pkt 2fpkt"];
1071--13631[label="0.5;1pkt 1fpkt"];
1071--14034[label="0.2;1pkt 1fpkt"];
1071--14225[label="0.0165746;3pkt 3fpkt"];
1071--15894[label="1;1pkt 1fpkt"];
1071--16483[label="0.2;1pkt 1fpkt"];
1975--7008[label="1;1pkt 1fpkt"];
1975--13070[label="1;1pkt 1fpkt"];
1975--15894[label="1;1pkt 1fpkt"];
6237--7008[label="0.666667;2pkt 2fpkt"];
6237--8643[label="1;3pkt 3fpkt"];
6237--9203[label="1;2pkt 2fpkt"];
6237--13631[label="1;2pkt 2fpkt"];
7008--8643[label="0.666667;2pkt 2fpkt"];
7008--9203[label="0.5;1pkt 1fpkt"];
7008--9886[label="0.2;1pkt 1fpkt"];
7008--10750[label="0.277778;20pkt 20fpkt"];
7008--12781[label="0.0833333;1pkt 1fpkt"];
7008--13070[label="1;1pkt 1fpkt"];
7008--13631[label="0.5;1pkt 1fpkt"];
7008--14034[label="0.2;1pkt 1fpkt"];
7008--15894[label="1;1pkt 1fpkt"];
7008--16483[label="0.2;1pkt 1fpkt"];
8643--9203[label="1;2pkt 2fpkt"];
8643--13631[label="1;2pkt 2fpkt"];
9203--13631[label="1;2pkt 2fpkt"];
13070--15894[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.154.249" src_ip="221.124.86.94" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.148.167.225"/>
    </slice>
    <from sec="1284009246" usec="0"/>
    <to sec="1284009261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.85.237.225"/>
    </slice>
    <from sec="1284008897" usec="0"/>
    <to sec="1284008931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.54.58.226"/>
    </slice>
    <from sec="1284009194" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.246.61.226"/>
    </slice>
    <from sec="1284008801" usec="0"/>
    <to sec="1284008820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.115.140.226"/>
    </slice>
    <from sec="1284008765" usec="0"/>
    <to sec="1284008806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.135.67.227"/>
    </slice>
    <from sec="1284008536" usec="0"/>
    <to sec="1284009083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.43.117.227"/>
    </slice>
    <from sec="1284008741" usec="0"/>
    <to sec="1284008757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.84.173.227"/>
    </slice>
    <from sec="1284008756" usec="0"/>
    <to sec="1284008761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.189.205.227"/>
    </slice>
    <from sec="1284008950" usec="0"/>
    <to sec="1284008964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.186.2.228"/>
    </slice>
    <from sec="1284009096" usec="0"/>
    <to sec="1284009115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.60.138.228"/>
    </slice>
    <from sec="1284008942" usec="0"/>
    <to sec="1284009277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.73.178.228"/>
    </slice>
    <from sec="1284008731" usec="0"/>
    <to sec="1284008742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.12.183.228"/>
    </slice>
    <from sec="1284008747" usec="0"/>
    <to sec="1284008757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.29.33.229"/>
    </slice>
    <from sec="1284008728" usec="0"/>
    <to sec="1284008735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.85.82.229"/>
    </slice>
    <from sec="1284008998" usec="0"/>
    <to sec="1284009003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.45.104.229"/>
    </slice>
    <from sec="1284009205" usec="0"/>
    <to sec="1284009219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.250.218.229"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284008578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.159.116.230"/>
    </slice>
    <from sec="1284009065" usec="0"/>
    <to sec="1284009070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.170.119.230"/>
    </slice>
    <from sec="1284008957" usec="0"/>
    <to sec="1284008976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.145.191.231"/>
    </slice>
    <from sec="1284008420" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.0.205.231"/>
    </slice>
    <from sec="1284008657" usec="0"/>
    <to sec="1284008673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
833[label="16.110.180.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1236[label="28.37.1.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
1835[label="148.52.89.232;s;3pkt 3fpkt", shape=diamond, color=yellow];
2286[label="64.140.140.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
13171[label="148.52.89.232;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15953[label="148.52.89.232;3pkt 3fpkt", shape=invtriangle, color=brown];
17632[label="148.52.89.232;3pkt 3fpkt", shape=invhouse, color=bisque];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.89.232:1395, 28.37.1.56:1286}[33.3333%]&lt;BR/&gt;{148.52.89.232:1395, 16.110.180.80:9855}[33.3333%]&lt;BR/&gt;{148.52.89.232:1395, 64.140.140.246:60286}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1395: (50%)&lt;BR/&gt; 60286: (16.6667%)&lt;BR/&gt; 9855: (16.6667%)&lt;BR/&gt; 1286: (16.6667%)&gt;];
}
833--1835[label="1;1pkt 1fpkt"];
833--13171[label="1;1pkt 1fpkt"];
833--15953[label="1;1pkt 1fpkt"];
833--17632[label="1;1pkt 1fpkt"];
1236--1835[label="1;1pkt 1fpkt"];
1236--13171[label="1;1pkt 1fpkt"];
1236--15953[label="1;1pkt 1fpkt"];
1236--17632[label="1;1pkt 1fpkt"];
1835--2286[label="1;1pkt 1fpkt"];
1835--13171[label="1;3pkt 3fpkt"];
1835--15953[label="1;3pkt 3fpkt"];
1835--17632[label="1;3pkt 3fpkt"];
2286--13171[label="1;1pkt 1fpkt"];
2286--15953[label="1;1pkt 1fpkt"];
2286--17632[label="1;1pkt 1fpkt"];
13171--15953[label="1;3pkt 3fpkt"];
13171--17632[label="1;3pkt 3fpkt"];
15953--17632[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="64.140.140.246" dst_port="60286" src_ip="148.52.89.232" src_port="1395"/>
      <filter dst_ip="16.110.180.80" dst_port="9855" src_ip="148.52.89.232" src_port="1395"/>
      <filter dst_ip="28.37.1.56" dst_port="1286" src_ip="148.52.89.232" src_port="1395"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.189.178.232"/>
    </slice>
    <from sec="1284009275" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.105.184.232"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.122.209.232"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.180.81.233"/>
    </slice>
    <from sec="1284009053" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.171.107.234"/>
    </slice>
    <from sec="1284008949" usec="0"/>
    <to sec="1284008989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.5.205.234"/>
    </slice>
    <from sec="1284009166" usec="0"/>
    <to sec="1284009199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
5901[label="141.50.128.235;s;14pkt 14fpkt", shape=diamond, color=yellow];
13210[label="141.50.128.235;15pkt 15fpkt", shape=pentagon, color=darkviolet];
15971[label="141.50.128.235;15pkt 15fpkt", shape=invtriangle, color=brown];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.50.128.235:80, 145.105.38.191:*}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59087: (3.40909%)&lt;BR/&gt; 59045: (3.40909%)&lt;BR/&gt; 58994: (3.40909%)&lt;BR/&gt; 58950: (3.40909%)&gt;];
}
5901--13210[label="1;14pkt 14fpkt"];
5901--15971[label="1;14pkt 14fpkt"];
13210--15971[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.38.191" src_ip="141.50.128.235" src_port="80"/>
    </slice>
    <from sec="1284008422" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
4698[label="3.91.205.235;s;631pkt 631fpkt", shape=diamond, color=yellow];
13215[label="3.91.205.235;668pkt 668fpkt", shape=pentagon, color=darkviolet];
15974[label="3.91.205.235;668pkt 668fpkt", shape=invtriangle, color=brown];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.91.205.235:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41055: (0.152517%)&lt;BR/&gt; 29243: (0.152517%)&lt;BR/&gt; 10347: (0.152517%)&lt;BR/&gt; 6263: (0.152517%)&gt;];
}
4698--13215[label="0.998415;630pkt 630fpkt"];
4698--15974[label="0.998415;630pkt 630fpkt"];
13215--15974[label="1;668pkt 668fpkt"];
</description>
    <slice>
      <filter src_ip="3.91.205.235" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.169.224.235"/>
    </slice>
    <from sec="1284008880" usec="0"/>
    <to sec="1284008884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.16.250.235"/>
    </slice>
    <from sec="1284008651" usec="0"/>
    <to sec="1284008717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.178.84.236"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284008982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.20.234.236"/>
    </slice>
    <from sec="1284008833" usec="0"/>
    <to sec="1284008897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.138.18.237"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.32.104.237"/>
    </slice>
    <from sec="1284008410" usec="0"/>
    <to sec="1284009231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.247.101.238"/>
    </slice>
    <from sec="1284008415" usec="0"/>
    <to sec="1284009187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.158.24.239"/>
    </slice>
    <from sec="1284009282" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.171.60.239"/>
    </slice>
    <from sec="1284008699" usec="0"/>
    <to sec="1284009106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.247.200.239"/>
    </slice>
    <from sec="1284008759" usec="0"/>
    <to sec="1284009264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.81.52.240"/>
    </slice>
    <from sec="1284008962" usec="0"/>
    <to sec="1284009104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.179.72.240"/>
    </slice>
    <from sec="1284009202" usec="0"/>
    <to sec="1284009213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.89.178.240"/>
    </slice>
    <from sec="1284008500" usec="0"/>
    <to sec="1284009267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.248.151.241"/>
    </slice>
    <from sec="1284008739" usec="0"/>
    <to sec="1284008750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.25.84.242"/>
    </slice>
    <from sec="1284009244" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.91.7.243"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.177.27.243"/>
    </slice>
    <from sec="1284008934" usec="0"/>
    <to sec="1284008950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.96.244.243"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.144.244"/>
    </slice>
    <from sec="1284008729" usec="0"/>
    <to sec="1284009173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.195.177.244"/>
    </slice>
    <from sec="1284008859" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.108.35.245"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.133.114.245"/>
    </slice>
    <from sec="1284008462" usec="0"/>
    <to sec="1284008525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.229.170.245"/>
    </slice>
    <from sec="1284009142" usec="0"/>
    <to sec="1284009272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.710103,2.48155,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
2494[label="45.6.225.245;s;255pkt 255fpkt", shape=diamond, color=yellow];
13362[label="45.6.225.245;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.6.225.245:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1387: (0.196078%)&lt;BR/&gt; 1386: (0.196078%)&lt;BR/&gt; 1385: (0.196078%)&lt;BR/&gt; 1384: (0.196078%)&gt;];
}
2494--13362[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="45.6.225.245"/>
    </slice>
    <from sec="1284008510" usec="0"/>
    <to sec="1284008533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.133.50.247"/>
    </slice>
    <from sec="1284008981" usec="0"/>
    <to sec="1284009007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.10.196.247"/>
    </slice>
    <from sec="1284008513" usec="0"/>
    <to sec="1284008515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.162.12.250"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.158.43.250"/>
    </slice>
    <from sec="1284008473" usec="0"/>
    <to sec="1284008508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.236.108.250"/>
    </slice>
    <from sec="1284008806" usec="0"/>
    <to sec="1284008854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.148.152.250"/>
    </slice>
    <from sec="1284008952" usec="0"/>
    <to sec="1284008968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.28.70.251"/>
    </slice>
    <from sec="1284008977" usec="0"/>
    <to sec="1284008986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.195.22.253"/>
    </slice>
    <from sec="1284008431" usec="0"/>
    <to sec="1284009266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.27.48.253"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.83.115.254"/>
    </slice>
    <from sec="1284008695" usec="0"/>
    <to sec="1284008711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.105.35.255"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.50.48.255"/>
    </slice>
    <from sec="1284009297" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.392926,2.52217,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.197.149.255"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.80.2.0"/>
    </slice>
    <from sec="1284008978" usec="0"/>
    <to sec="1284009024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.164.18.0"/>
    </slice>
    <from sec="1284008986" usec="0"/>
    <to sec="1284009001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.23.36.0"/>
    </slice>
    <from sec="1284009097" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.4.48.0"/>
    </slice>
    <from sec="1284008657" usec="0"/>
    <to sec="1284008674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
8930[label="52.77.121.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13496[label="52.77.121.0;1pkt 1fpkt", shape=invtriangle, color=brown];
16142[label="52.77.121.0;1pkt 1fpkt", shape=invhouse, color=bisque];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.77.121.0:61948, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61948: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8930--13496[label="1;1pkt 1fpkt"];
8930--16142[label="1;1pkt 1fpkt"];
13496--16142[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="52.77.121.0" src_port="61948"/>
    </slice>
    <from sec="1284008673" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
8949[label="220.181.118.1;129pkt 129fpkt", shape=pentagon, color=darkviolet];
13504[label="220.181.118.1;129pkt 129fpkt", shape=invtriangle, color=brown];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.181.118.1:*, 198.45.134.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52768: (0.387597%)&lt;BR/&gt; 52766: (0.387597%)&lt;BR/&gt; 52764: (0.387597%)&lt;BR/&gt; 52762: (0.387597%)&gt;];
}
8949--13504[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.134.161" dst_port="80" src_ip="220.181.118.1"/>
    </slice>
    <from sec="1284008421" usec="0"/>
    <to sec="1284009291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.83.134.1"/>
    </slice>
    <from sec="1284008969" usec="0"/>
    <to sec="1284009012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.252.167.2"/>
    </slice>
    <from sec="1284009226" usec="0"/>
    <to sec="1284009261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.190.30.3"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.34.46.3"/>
    </slice>
    <from sec="1284009023" usec="0"/>
    <to sec="1284009051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.81.128.3"/>
    </slice>
    <from sec="1284008463" usec="0"/>
    <to sec="1284008475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.148.144.3"/>
    </slice>
    <from sec="1284008823" usec="0"/>
    <to sec="1284008960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
9000[label="216.34.173.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13527[label="216.34.173.3;1pkt 1fpkt", shape=invtriangle, color=brown];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.34.173.3:55478, 145.105.247.105:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55478: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9000--13527[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.247.105" dst_port="25" src_ip="216.34.173.3" src_port="55478"/>
    </slice>
    <from sec="1284008800" usec="0"/>
    <to sec="1284008803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
9030[label="145.105.241.4;47pkt 47fpkt", shape=pentagon, color=darkviolet];
13539[label="145.105.241.4;48pkt 48fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.241.4:80, 45.31.64.176:*}[39.5833%]&lt;BR/&gt;{145.105.241.4:80, 58.40.37.160:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62386: (1.05263%)&lt;BR/&gt; 61873: (1.05263%)&lt;BR/&gt; 54705: (1.05263%)&lt;BR/&gt; 54666: (1.05263%)&gt;];
}
9030--13539[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="45.31.64.176" src_ip="145.105.241.4" src_port="80"/>
      <filter dst_ip="58.40.37.160" src_ip="145.105.241.4" src_port="80"/>
    </slice>
    <from sec="1284008500" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.148.158.5"/>
    </slice>
    <from sec="1284008448" usec="0"/>
    <to sec="1284008499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.98.18.6"/>
    </slice>
    <from sec="1284009208" usec="0"/>
    <to sec="1284009220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.96.118.6"/>
    </slice>
    <from sec="1284008909" usec="0"/>
    <to sec="1284008921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.35.176.6"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
9070[label="44.88.5.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13559[label="44.88.5.7;1pkt 1fpkt", shape=invtriangle, color=brown];
16190[label="44.88.5.7;1pkt 1fpkt", shape=invhouse, color=bisque];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.5.7:1525, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1525: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9070--13559[label="1;1pkt 1fpkt"];
9070--16190[label="1;1pkt 1fpkt"];
13559--16190[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="44.88.5.7" src_port="1525"/>
    </slice>
    <from sec="1284008667" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.104.6.8"/>
    </slice>
    <from sec="1284008986" usec="0"/>
    <to sec="1284009005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.67.162.8"/>
    </slice>
    <from sec="1284009288" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.236.171.8"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
9111[label="29.44.231.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13580[label="29.44.231.8;1pkt 1fpkt", shape=invtriangle, color=brown];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.44.231.8:51903, 199.56.52.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51903: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9111--13580[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.99" dst_port="80" src_ip="29.44.231.8" src_port="51903"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.40.7.9"/>
    </slice>
    <from sec="1284009172" usec="0"/>
    <to sec="1284009259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.201.54.9"/>
    </slice>
    <from sec="1284009290" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
9120[label="167.190.73.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13585[label="167.190.73.9;2pkt 2fpkt", shape=invtriangle, color=brown];
16202[label="167.190.73.9;2pkt 2fpkt", shape=invhouse, color=bisque];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.73.9:56927, 35.104.171.25:80}[50%]&lt;BR/&gt;{167.190.73.9:56930, 35.104.171.25:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56930: (25%)&lt;BR/&gt; 56927: (25%)&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
9120--13585[label="1;2pkt 2fpkt"];
9120--16202[label="1;2pkt 2fpkt"];
13585--16202[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="35.104.171.25" dst_port="443" src_ip="167.190.73.9" src_port="56930"/>
      <filter dst_ip="35.104.171.25" dst_port="80" src_ip="167.190.73.9" src_port="56927"/>
    </slice>
    <from sec="1284009165" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.241.164.9"/>
    </slice>
    <from sec="1284008877" usec="0"/>
    <to sec="1284008887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.18.3.10"/>
    </slice>
    <from sec="1284008489" usec="0"/>
    <to sec="1284008507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.26.36.10"/>
    </slice>
    <from sec="1284009129" usec="0"/>
    <to sec="1284009204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.124.38.10"/>
    </slice>
    <from sec="1284009164" usec="0"/>
    <to sec="1284009181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
9144[label="198.143.64.10;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13598[label="198.143.64.10;14pkt 14fpkt", shape=invtriangle, color=brown];
16210[label="198.143.64.10;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.143.64.10:*, 198.32.68.2:28080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28080: (50%)&lt;BR/&gt; 56793: (3.48837%)&lt;BR/&gt; 56789: (3.48837%)&lt;BR/&gt; 56785: (3.48837%)&lt;BR/&gt; 56781: (3.48837%)&gt;];
}
9144--13598[label="1;14pkt 14fpkt"];
9144--16210[label="1;14pkt 14fpkt"];
13598--16210[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.68.2" dst_port="28080" src_ip="198.143.64.10"/>
    </slice>
    <from sec="1284008426" usec="0"/>
    <to sec="1284009267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.86.105.10"/>
    </slice>
    <from sec="1284009248" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
9153[label="62.146.167.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13600[label="62.146.167.10;1pkt 1fpkt", shape=invtriangle, color=brown];
16211[label="62.146.167.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.146.167.10:49919, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49919: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9153--13600[label="1;1pkt 1fpkt"];
9153--16211[label="1;1pkt 1fpkt"];
13600--16211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="62.146.167.10" src_port="49919"/>
    </slice>
    <from sec="1284008690" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.58.168.10"/>
    </slice>
    <from sec="1284009075" usec="0"/>
    <to sec="1284009081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.88.176.10"/>
    </slice>
    <from sec="1284009121" usec="0"/>
    <to sec="1284009128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
9156[label="40.35.180.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13603[label="40.35.180.10;1pkt 1fpkt", shape=invtriangle, color=brown];
16214[label="40.35.180.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.35.180.10:80, 198.32.104.161:54354}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54354: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9156--13603[label="1;1pkt 1fpkt"];
9156--16214[label="1;1pkt 1fpkt"];
13603--16214[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.104.161" dst_port="54354" src_ip="40.35.180.10" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.2.229.10"/>
    </slice>
    <from sec="1284008975" usec="0"/>
    <to sec="1284009127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.45.66.11"/>
    </slice>
    <from sec="1284008989" usec="0"/>
    <to sec="1284009117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.85.136.11"/>
    </slice>
    <from sec="1284009160" usec="0"/>
    <to sec="1284009172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.33.189.11"/>
    </slice>
    <from sec="1284008529" usec="0"/>
    <to sec="1284008536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.162.111.12"/>
    </slice>
    <from sec="1284009137" usec="0"/>
    <to sec="1284009263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.12.115.12"/>
    </slice>
    <from sec="1284008901" usec="0"/>
    <to sec="1284008912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.169.167.12"/>
    </slice>
    <from sec="1284009059" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.33.210.12"/>
    </slice>
    <from sec="1284009114" usec="0"/>
    <to sec="1284009218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.193.39.13"/>
    </slice>
    <from sec="1284008965" usec="0"/>
    <to sec="1284008990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.226.64.13"/>
    </slice>
    <from sec="1284008694" usec="0"/>
    <to sec="1284008739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1018{
style=filled;
color=gray75;
9201[label="220.179.67.13;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13630[label="220.179.67.13;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1018[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.179.67.13:80, 198.32.104.161:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54118: (2.85714%)&lt;BR/&gt; 54117: (2.85714%)&lt;BR/&gt; 54116: (2.85714%)&lt;BR/&gt; 54115: (2.85714%)&gt;];
}
9201--13630[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.104.161" src_ip="220.179.67.13" src_port="80"/>
    </slice>
    <from sec="1284009288" usec="0"/>
    <to sec="1284009292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.35.117.13"/>
    </slice>
    <from sec="1284008795" usec="0"/>
    <to sec="1284008832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.193.128.13"/>
    </slice>
    <from sec="1284008883" usec="0"/>
    <to sec="1284008919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.31.236.13"/>
    </slice>
    <from sec="1284008819" usec="0"/>
    <to sec="1284008859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
9225[label="29.236.64.14;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13641[label="29.236.64.14;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.236.64.14:3862, 199.56.44.150:5200}[50%]&lt;BR/&gt;{29.236.64.14:15391, 199.56.44.150:37066}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37066: (25%)&lt;BR/&gt; 15391: (25%)&lt;BR/&gt; 5200: (25%)&lt;BR/&gt; 3862: (25%)&gt;];
}
9225--13641[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.44.150" dst_port="37066" src_ip="29.236.64.14" src_port="15391"/>
      <filter dst_ip="199.56.44.150" dst_port="5200" src_ip="29.236.64.14" src_port="3862"/>
    </slice>
    <from sec="1284009150" usec="0"/>
    <to sec="1284009184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.146.74.14"/>
    </slice>
    <from sec="1284009178" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.45.116.14"/>
    </slice>
    <from sec="1284008492" usec="0"/>
    <to sec="1284008497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.99.20.16"/>
    </slice>
    <from sec="1284008701" usec="0"/>
    <to sec="1284008706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
9252[label="29.107.58.16;38pkt 38fpkt", shape=pentagon, color=darkviolet];
13655[label="29.107.58.16;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.107.58.16:*, 137.89.28.125:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1611: (1.31579%)&lt;BR/&gt; 1606: (1.31579%)&lt;BR/&gt; 1605: (1.31579%)&lt;BR/&gt; 1604: (1.31579%)&gt;];
}
9252--13655[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="137.89.28.125" dst_port="80" src_ip="29.107.58.16"/>
    </slice>
    <from sec="1284009239" usec="0"/>
    <to sec="1284009255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.86.16"/>
    </slice>
    <from sec="1284008950" usec="0"/>
    <to sec="1284008975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
9258[label="167.190.123.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13660[label="167.190.123.16;1pkt 1fpkt", shape=invtriangle, color=brown];
16250[label="167.190.123.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.123.16:44078, 34.1.180.13:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44078: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
9258--13660[label="1;1pkt 1fpkt"];
9258--16250[label="1;1pkt 1fpkt"];
13660--16250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.1.180.13" dst_port="1863" src_ip="167.190.123.16" src_port="44078"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
9259[label="29.106.130.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13661[label="29.106.130.16;1pkt 1fpkt", shape=invtriangle, color=brown];
16251[label="29.106.130.16;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.106.130.16:2304, 199.56.44.150:5200}[50%]&lt;BR/&gt;{29.106.130.16:20367, 199.56.44.150:52631}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5200: (30%)&lt;BR/&gt; 2304: (30%)&lt;BR/&gt; 52631: (20%)&lt;BR/&gt; 20367: (20%)&gt;];
}
9259--13661[label="1;1pkt 1fpkt"];
9259--16251[label="1;2pkt 2fpkt"];
13661--16251[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.44.150" dst_port="52631" src_ip="29.106.130.16" src_port="20367"/>
      <filter dst_ip="199.56.44.150" dst_port="5200" src_ip="29.106.130.16" src_port="2304"/>
    </slice>
    <from sec="1284009144" usec="0"/>
    <to sec="1284009181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
9260[label="39.235.146.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13662[label="39.235.146.16;2pkt 2fpkt", shape=invtriangle, color=brown];
16252[label="39.235.146.16;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.235.146.16:3671, 167.190.180.28:80}[50%]&lt;BR/&gt;{39.235.146.16:3673, 167.190.180.28:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3673: (25%)&lt;BR/&gt; 3671: (25%)&gt;];
}
9260--13662[label="1;2pkt 2fpkt"];
9260--16252[label="1;2pkt 2fpkt"];
13662--16252[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.28" dst_port="80" src_ip="39.235.146.16" src_port="3673"/>
      <filter dst_ip="167.190.180.28" dst_port="80" src_ip="39.235.146.16" src_port="3671"/>
    </slice>
    <from sec="1284009147" usec="0"/>
    <to sec="1284009155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1031{
style=filled;
color=gray75;
9262[label="46.128.172.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13663[label="46.128.172.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1031[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.128.172.16:49944, 199.56.52.96:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49944: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9262--13663[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.96" dst_port="80" src_ip="46.128.172.16" src_port="49944"/>
    </slice>
    <from sec="1284009250" usec="0"/>
    <to sec="1284009279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
9272[label="145.105.22.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13670[label="145.105.22.17;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.22.17:58671, 146.127.169.41:80}[50%]&lt;BR/&gt;{145.105.22.17:58672, 146.127.169.41:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58672: (25%)&lt;BR/&gt; 58671: (25%)&gt;];
}
9272--13670[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="146.127.169.41" dst_port="80" src_ip="145.105.22.17" src_port="58672"/>
      <filter dst_ip="146.127.169.41" dst_port="80" src_ip="145.105.22.17" src_port="58671"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.64.41.17"/>
    </slice>
    <from sec="1284009068" usec="0"/>
    <to sec="1284009089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
9278[label="198.176.81.17;226pkt 226fpkt", shape=pentagon, color=darkviolet];
13674[label="198.176.81.17;225pkt 225fpkt", shape=invtriangle, color=brown];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.176.81.17:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
9278--13674[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="198.176.81.17" src_port="5060"/>
    </slice>
    <from sec="1284008422" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.98.82.17"/>
    </slice>
    <from sec="1284008769" usec="0"/>
    <to sec="1284008781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.4.84.17"/>
    </slice>
    <from sec="1284008971" usec="0"/>
    <to sec="1284008975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.91.108.17"/>
    </slice>
    <from sec="1284008467" usec="0"/>
    <to sec="1284008564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
9289[label="148.36.156.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13681[label="148.36.156.17;1pkt 1fpkt", shape=invtriangle, color=brown];
16262[label="148.36.156.17;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.156.17:80, 188.140.65.102:58240}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58240: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9289--13681[label="1;1pkt 1fpkt"];
9289--16262[label="1;1pkt 1fpkt"];
13681--16262[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="188.140.65.102" dst_port="58240" src_ip="148.36.156.17" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.81.185.17"/>
    </slice>
    <from sec="1284008974" usec="0"/>
    <to sec="1284008977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.214.17"/>
    </slice>
    <from sec="1284008945" usec="0"/>
    <to sec="1284008971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.198.24.18"/>
    </slice>
    <from sec="1284008650" usec="0"/>
    <to sec="1284009207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
9301[label="148.52.63.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13692[label="148.52.63.18;2pkt 2fpkt", shape=invtriangle, color=brown];
16269[label="148.52.63.18;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.63.18:25, 69.216.238.18:21609}[50%]&lt;BR/&gt;{148.52.63.18:80, 33.73.181.162:48155}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21609: (30%)&lt;BR/&gt; 25: (30%)&lt;BR/&gt; 48155: (20%)&lt;BR/&gt; 80: (20%)&gt;];
}
9301--13692[label="1;2pkt 2fpkt"];
9301--16269[label="1;1pkt 1fpkt"];
13692--16269[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.181.162" dst_port="48155" src_ip="148.52.63.18" src_port="80"/>
      <filter dst_ip="69.216.238.18" dst_port="21609" src_ip="148.52.63.18" src_port="25"/>
    </slice>
    <from sec="1284009124" usec="0"/>
    <to sec="1284009168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.45.99.18"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284008992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.100.174.18"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.115.215.18"/>
    </slice>
    <from sec="1284008672" usec="0"/>
    <to sec="1284008686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.69.35.19"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284009026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.208.155.19"/>
    </slice>
    <from sec="1284008518" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.80.160.19"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.27.188.19"/>
    </slice>
    <from sec="1284009190" usec="0"/>
    <to sec="1284009251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
9336[label="68.66.205.19;21pkt 21fpkt", shape=pentagon, color=darkviolet];
13708[label="68.66.205.19;20pkt 20fpkt", shape=invtriangle, color=brown];
16277[label="68.66.205.19;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.66.205.19:*, 199.56.56.145:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2616: (2.41935%)&lt;BR/&gt; 2615: (2.41935%)&lt;BR/&gt; 2614: (2.41935%)&lt;BR/&gt; 2613: (2.41935%)&gt;];
}
9336--13708[label="1;20pkt 20fpkt"];
9336--16277[label="1;21pkt 21fpkt"];
13708--16277[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.145" dst_port="80" src_ip="68.66.205.19"/>
    </slice>
    <from sec="1284009163" usec="0"/>
    <to sec="1284009195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.142.212.19"/>
    </slice>
    <from sec="1284009069" usec="0"/>
    <to sec="1284009096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
9348[label="170.219.68.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13713[label="170.219.68.20;1pkt 1fpkt", shape=invtriangle, color=brown];
16279[label="170.219.68.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.219.68.20:61351, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61351: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9348--13713[label="1;1pkt 1fpkt"];
9348--16279[label="1;1pkt 1fpkt"];
13713--16279[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="170.219.68.20" src_port="61351"/>
    </slice>
    <from sec="1284009242" usec="0"/>
    <to sec="1284009261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
9351[label="221.74.107.20;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13716[label="221.74.107.20;4pkt 4fpkt", shape=invtriangle, color=brown];
16280[label="221.74.107.20;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.74.107.20:4312, 198.45.56.216:80}[20%]&lt;BR/&gt;{221.74.107.20:4315, 198.45.56.216:80}[20%]&lt;BR/&gt;{221.74.107.20:4317, 198.45.56.216:80}[20%]&lt;BR/&gt;{221.74.107.20:4319, 198.45.56.216:80}[20%]&lt;BR/&gt;{221.74.107.20:4323, 198.45.56.216:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4323: (10.7143%)&lt;BR/&gt; 4319: (10.7143%)&lt;BR/&gt; 4317: (10.7143%)&lt;BR/&gt; 4315: (10.7143%)&gt;];
}
9351--13716[label="1;4pkt 4fpkt"];
9351--16280[label="1;5pkt 5fpkt"];
13716--16280[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.56.216" dst_port="80" src_ip="221.74.107.20" src_port="4323"/>
      <filter dst_ip="198.45.56.216" dst_port="80" src_ip="221.74.107.20" src_port="4319"/>
      <filter dst_ip="198.45.56.216" dst_port="80" src_ip="221.74.107.20" src_port="4317"/>
      <filter dst_ip="198.45.56.216" dst_port="80" src_ip="221.74.107.20" src_port="4315"/>
      <filter dst_ip="198.45.56.216" dst_port="80" src_ip="221.74.107.20" src_port="4312"/>
    </slice>
    <from sec="1284009276" usec="0"/>
    <to sec="1284009290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.42.192.20"/>
    </slice>
    <from sec="1284008837" usec="0"/>
    <to sec="1284008851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.160.2.21"/>
    </slice>
    <from sec="1284009078" usec="0"/>
    <to sec="1284009087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
9371[label="148.175.67.21;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13726[label="148.175.67.21;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.175.67.21:*, 209.194.187.53:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65063: (2.77778%)&lt;BR/&gt; 63620: (2.77778%)&lt;BR/&gt; 62857: (2.77778%)&lt;BR/&gt; 60379: (2.77778%)&gt;];
}
9371--13726[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="209.194.187.53" dst_port="80" src_ip="148.175.67.21"/>
    </slice>
    <from sec="1284008605" usec="0"/>
    <to sec="1284009269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.228.128.21"/>
    </slice>
    <from sec="1284009180" usec="0"/>
    <to sec="1284009223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
9384[label="198.33.75.22;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13733[label="198.33.75.22;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.33.75.22:*, 167.190.180.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27551: (9.09091%)&lt;BR/&gt; 27509: (9.09091%)&lt;BR/&gt; 24183: (9.09091%)&lt;BR/&gt; 20828: (9.09091%)&gt;];
}
9384--13733[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="198.33.75.22"/>
    </slice>
    <from sec="1284009234" usec="0"/>
    <to sec="1284009248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.77.22"/>
    </slice>
    <from sec="1284009275" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
9386[label="21.224.96.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13735[label="21.224.96.22;1pkt 1fpkt", shape=invtriangle, color=brown];
16293[label="21.224.96.22;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.224.96.22:4126, 199.56.44.150:5200}[50%]&lt;BR/&gt;{21.224.96.22:12204, 199.56.44.150:37812}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5200: (30%)&lt;BR/&gt; 4126: (30%)&lt;BR/&gt; 37812: (20%)&lt;BR/&gt; 12204: (20%)&gt;];
}
9386--13735[label="1;1pkt 1fpkt"];
9386--16293[label="1;2pkt 2fpkt"];
13735--16293[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.44.150" dst_port="37812" src_ip="21.224.96.22" src_port="12204"/>
      <filter dst_ip="199.56.44.150" dst_port="5200" src_ip="21.224.96.22" src_port="4126"/>
    </slice>
    <from sec="1284009240" usec="0"/>
    <to sec="1284009257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
9411[label="223.144.170.23;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13751[label="223.144.170.23;3pkt 3fpkt", shape=invtriangle, color=brown];
16302[label="223.144.170.23;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.144.170.23:443, 167.190.6.229:2100}[33.3333%]&lt;BR/&gt;{223.144.170.23:443, 167.190.2.116:53869}[33.3333%]&lt;BR/&gt;{223.144.170.23:443, 167.190.2.116:53870}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 53870: (16.6667%)&lt;BR/&gt; 53869: (16.6667%)&lt;BR/&gt; 2100: (16.6667%)&gt;];
}
9411--13751[label="1;3pkt 3fpkt"];
9411--16302[label="1;3pkt 3fpkt"];
13751--16302[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.2.116" dst_port="53870" src_ip="223.144.170.23" src_port="443"/>
      <filter dst_ip="167.190.2.116" dst_port="53869" src_ip="223.144.170.23" src_port="443"/>
      <filter dst_ip="167.190.6.229" dst_port="2100" src_ip="223.144.170.23" src_port="443"/>
    </slice>
    <from sec="1284008465" usec="0"/>
    <to sec="1284008775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.69.17.24"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284009045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
9429[label="198.32.112.24;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13764[label="198.32.112.24;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.112.24:*, 199.92.161.180:*}[30%]&lt;BR/&gt;{198.32.112.24:*, 199.92.161.182:*}[30%]&lt;BR/&gt;{198.32.112.24:0, *:0}[20%]&lt;BR/&gt;{198.32.112.24:2121, *:2121}[20%]&lt;BR/&gt;{198.32.112.24:2122, *:2122}[20%]&lt;BR/&gt;{198.32.112.24:4121, *:4121}[20%]&lt;BR/&gt;{198.32.112.24:*, 192.168.11.4:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4121: (20%)&lt;BR/&gt; 2122: (20%)&lt;BR/&gt; 2121: (20%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 57606: (5%)&gt;];
}
9429--13764[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="199.92.161.182" src_ip="198.32.112.24"/>
      <filter dst_ip="199.92.161.180" src_ip="198.32.112.24"/>
      <filter dst_ip="192.168.11.4" src_ip="198.32.112.24"/>
      <filter dst_port="4121" src_ip="198.32.112.24" src_port="4121"/>
      <filter dst_port="2122" src_ip="198.32.112.24" src_port="2122"/>
      <filter dst_port="2121" src_ip="198.32.112.24" src_port="2121"/>
      <filter src_ip="198.32.112.24"/>
    </slice>
    <from sec="1284008478" usec="0"/>
    <to sec="1284009237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
9430[label="137.5.118.24;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13765[label="137.5.118.24;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.5.118.24:57405, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57405: (50%)&lt;BR/&gt; 62968: (5%)&lt;BR/&gt; 59513: (5%)&lt;BR/&gt; 53512: (5%)&lt;BR/&gt; 29394: (5%)&gt;];
}
9430--13765[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="137.5.118.24" src_port="57405"/>
    </slice>
    <from sec="1284008941" usec="0"/>
    <to sec="1284008979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.124.20.25"/>
    </slice>
    <from sec="1284008820" usec="0"/>
    <to sec="1284008834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.46.47.25"/>
    </slice>
    <from sec="1284008815" usec="0"/>
    <to sec="1284008879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
902[label="199.56.44.150;d;454pkt 454fpkt", shape=diamond, color=yellow];
5704[label="9.64.97.78;s;2pkt 2fpkt", shape=diamond, color=yellow];
6719[label="199.56.44.150;d;339pkt 339fpkt", shape=hexagon, color=black];
9339[label="21.225.226.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9461[label="65.157.104.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9576[label="3.99.34.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9631[label="69.35.149.35;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9972[label="198.33.229.53;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10118[label="25.105.6.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10349[label="29.105.162.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10447[label="9.64.97.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11092[label="210.169.64.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11147[label="217.105.64.115;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11418[label="29.106.234.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11500[label="27.179.162.135;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12472[label="29.107.164.188;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13018[label="216.7.166.222;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13158[label="29.107.212.231;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13368[label="210.173.90.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13371[label="20.170.112.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13432[label="65.148.238.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13710[label="21.225.226.19;2pkt 2fpkt", shape=invtriangle, color=brown];
13784[label="65.157.104.26;2pkt 2fpkt", shape=invtriangle, color=brown];
13882[label="69.35.149.35;1pkt 1fpkt", shape=invtriangle, color=brown];
14303[label="29.105.162.73;2pkt 2fpkt", shape=invtriangle, color=brown];
14359[label="9.64.97.78;2pkt 2fpkt", shape=invtriangle, color=brown];
14747[label="210.169.64.112;2pkt 2fpkt", shape=invtriangle, color=brown];
14777[label="217.105.64.115;2pkt 2fpkt", shape=invtriangle, color=brown];
14930[label="29.106.234.130;2pkt 2fpkt", shape=invtriangle, color=brown];
15554[label="29.107.164.188;2pkt 2fpkt", shape=invtriangle, color=brown];
15868[label="216.7.166.222;4pkt 4fpkt", shape=invtriangle, color=brown];
16056[label="210.173.90.246;1pkt 1fpkt", shape=invtriangle, color=brown];
16059[label="20.170.112.246;1pkt 1fpkt", shape=invtriangle, color=brown];
16101[label="65.148.238.250;2pkt 2fpkt", shape=invtriangle, color=brown];
16321[label="65.157.104.26;2pkt 2fpkt", shape=invhouse, color=bisque];
16661[label="29.105.162.73;2pkt 2fpkt", shape=invhouse, color=bisque];
16698[label="9.64.97.78;2pkt 2fpkt", shape=invhouse, color=bisque];
17035[label="29.106.234.130;2pkt 2fpkt", shape=invhouse, color=bisque];
17388[label="29.107.164.188;2pkt 2fpkt", shape=invhouse, color=bisque];
17576[label="216.7.166.222;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.56.44.150:5200}[42.6374%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5200: (22.1519%)&lt;BR/&gt; 0: (11.6226%)&lt;BR/&gt; 11560: (0.575374%)&lt;BR/&gt; 7743: (0.460299%)&lt;BR/&gt; 61264: (0.287687%)&gt;];
}
902--3826[label="0.00220264;1pkt 1fpkt"];
902--5704[label="1;2pkt 2fpkt"];
902--6719[label="1;339pkt 339fpkt"];
902--8895[label="0.00220264;1pkt 1fpkt"];
902--9339[label="1;2pkt 2fpkt"];
902--9461[label="1;2pkt 2fpkt"];
902--9576[label="1;1pkt 1fpkt"];
902--9631[label="1;2pkt 2fpkt"];
902--9972[label="1;2pkt 2fpkt"];
902--10118[label="1;2pkt 2fpkt"];
902--10349[label="0.5;1pkt 1fpkt"];
902--10447[label="1;2pkt 2fpkt"];
902--11092[label="1;2pkt 2fpkt"];
902--11147[label="1;2pkt 2fpkt"];
902--11418[label="1;2pkt 2fpkt"];
902--11500[label="1;2pkt 2fpkt"];
902--12472[label="1;2pkt 2fpkt"];
902--13018[label="1;4pkt 4fpkt"];
902--13158[label="1;2pkt 2fpkt"];
902--13368[label="1;1pkt 1fpkt"];
902--13371[label="1;1pkt 1fpkt"];
902--13432[label="1;2pkt 2fpkt"];
902--13710[label="1;2pkt 2fpkt"];
902--13784[label="1;2pkt 2fpkt"];
902--13882[label="1;1pkt 1fpkt"];
902--14303[label="0.5;1pkt 1fpkt"];
902--14359[label="1;2pkt 2fpkt"];
902--14747[label="1;2pkt 2fpkt"];
902--14777[label="1;2pkt 2fpkt"];
902--14930[label="1;2pkt 2fpkt"];
902--15554[label="1;2pkt 2fpkt"];
902--15868[label="1;4pkt 4fpkt"];
902--16056[label="1;1pkt 1fpkt"];
902--16059[label="1;1pkt 1fpkt"];
902--16101[label="1;2pkt 2fpkt"];
902--16321[label="1;2pkt 2fpkt"];
902--16661[label="0.5;1pkt 1fpkt"];
902--16698[label="1;2pkt 2fpkt"];
902--17035[label="1;2pkt 2fpkt"];
902--17388[label="1;2pkt 2fpkt"];
902--17576[label="1;4pkt 4fpkt"];
5704--10447[label="1;2pkt 2fpkt"];
5704--14359[label="1;2pkt 2fpkt"];
5704--16698[label="1;2pkt 2fpkt"];
6719--8895[label="0.00294985;1pkt 1fpkt"];
6719--9339[label="1;2pkt 2fpkt"];
6719--9461[label="1;2pkt 2fpkt"];
6719--9576[label="1;1pkt 1fpkt"];
6719--9972[label="1;2pkt 2fpkt"];
6719--10118[label="1;2pkt 2fpkt"];
6719--11092[label="1;2pkt 2fpkt"];
6719--11500[label="1;2pkt 2fpkt"];
6719--13158[label="1;2pkt 2fpkt"];
6719--13371[label="1;1pkt 1fpkt"];
6719--13432[label="1;2pkt 2fpkt"];
6719--13710[label="1;2pkt 2fpkt"];
6719--13784[label="1;2pkt 2fpkt"];
6719--14747[label="1;2pkt 2fpkt"];
6719--16059[label="1;1pkt 1fpkt"];
6719--16101[label="1;2pkt 2fpkt"];
6719--16321[label="1;2pkt 2fpkt"];
9339--13710[label="1;2pkt 2fpkt"];
9461--13784[label="1;2pkt 2fpkt"];
9461--16321[label="1;2pkt 2fpkt"];
9631--13882[label="1;1pkt 1fpkt"];
10349--14303[label="1;2pkt 2fpkt"];
10349--16661[label="1;2pkt 2fpkt"];
10447--14359[label="1;2pkt 2fpkt"];
10447--16698[label="1;2pkt 2fpkt"];
11092--14747[label="1;2pkt 2fpkt"];
11147--14777[label="1;2pkt 2fpkt"];
11418--14930[label="1;2pkt 2fpkt"];
11418--17035[label="1;2pkt 2fpkt"];
12472--15554[label="1;2pkt 2fpkt"];
12472--17388[label="1;2pkt 2fpkt"];
13018--15868[label="1;4pkt 4fpkt"];
13018--17576[label="1;4pkt 4fpkt"];
13368--16056[label="1;1pkt 1fpkt"];
13371--16059[label="1;1pkt 1fpkt"];
13432--16101[label="1;2pkt 2fpkt"];
13784--16321[label="1;2pkt 2fpkt"];
14303--16661[label="1;2pkt 2fpkt"];
14359--16698[label="1;2pkt 2fpkt"];
14930--17035[label="1;2pkt 2fpkt"];
15554--17388[label="1;2pkt 2fpkt"];
15868--17576[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.44.150" dst_port="5200"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
9468[label="69.35.160.26;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13789[label="69.35.160.26;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.35.160.26:*, 167.190.180.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49242: (4.34783%)&lt;BR/&gt; 49241: (4.34783%)&lt;BR/&gt; 49240: (4.34783%)&lt;BR/&gt; 49239: (4.34783%)&gt;];
}
9468--13789[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="69.35.160.26"/>
    </slice>
    <from sec="1284009272" usec="0"/>
    <to sec="1284009279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="186.85.163.26"/>
    </slice>
    <from sec="1284008952" usec="0"/>
    <to sec="1284008986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.226.26"/>
    </slice>
    <from sec="1284008513" usec="0"/>
    <to sec="1284008683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.13.1.27"/>
    </slice>
    <from sec="1284009187" usec="0"/>
    <to sec="1284009226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.16.9.27"/>
    </slice>
    <from sec="1284008965" usec="0"/>
    <to sec="1284009037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.81.21.27"/>
    </slice>
    <from sec="1284008895" usec="0"/>
    <to sec="1284008936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.26.34.27"/>
    </slice>
    <from sec="1284009087" usec="0"/>
    <to sec="1284009089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.224.61.27"/>
    </slice>
    <from sec="1284009235" usec="0"/>
    <to sec="1284009283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.11.106.27"/>
    </slice>
    <from sec="1284009143" usec="0"/>
    <to sec="1284009168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.134.129.27"/>
    </slice>
    <from sec="1284008948" usec="0"/>
    <to sec="1284008977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.179.231.27"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
9495[label="145.105.25.28;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13807[label="145.105.25.28;7pkt 7fpkt", shape=invtriangle, color=brown];
16336[label="145.105.25.28;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.25.28:443, 25.106.117.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 53389: (7.14286%)&lt;BR/&gt; 53388: (7.14286%)&lt;BR/&gt; 53387: (7.14286%)&lt;BR/&gt; 53386: (7.14286%)&gt;];
}
9495--13807[label="1;7pkt 7fpkt"];
9495--16336[label="1;7pkt 7fpkt"];
13807--16336[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="25.106.117.73" src_ip="145.105.25.28" src_port="443"/>
    </slice>
    <from sec="1284008705" usec="0"/>
    <to sec="1284008734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.138.122.28"/>
    </slice>
    <from sec="1284008851" usec="0"/>
    <to sec="1284008886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
9503[label="148.36.156.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13811[label="148.36.156.28;2pkt 2fpkt", shape=invtriangle, color=brown];
16340[label="148.36.156.28;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.156.28:1768, 34.88.159.80:53}[50%]&lt;BR/&gt;{148.36.156.28:42389, 34.88.159.80:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 42389: (25%)&lt;BR/&gt; 1768: (25%)&gt;];
}
9503--13811[label="1;2pkt 2fpkt"];
9503--16340[label="1;2pkt 2fpkt"];
13811--16340[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="34.88.159.80" dst_port="53" src_ip="148.36.156.28" src_port="42389"/>
      <filter dst_ip="34.88.159.80" dst_port="53" src_ip="148.36.156.28" src_port="1768"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.33.244.29"/>
    </slice>
    <from sec="1284009177" usec="0"/>
    <to sec="1284009188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.20.9.30"/>
    </slice>
    <from sec="1284008691" usec="0"/>
    <to sec="1284008730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.98.52.30"/>
    </slice>
    <from sec="1284008837" usec="0"/>
    <to sec="1284009101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.198.218.30"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.40.88.31"/>
    </slice>
    <from sec="1284009071" usec="0"/>
    <to sec="1284009153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.130.100.31"/>
    </slice>
    <from sec="1284008848" usec="0"/>
    <to sec="1284008886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
9547[label="198.32.112.31;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13834[label="198.32.112.31;10pkt 10fpkt", shape=invtriangle, color=brown];
16355[label="198.32.112.31;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.112.31:0, *:0}[30%]&lt;BR/&gt;{198.32.112.31:*, 199.92.161.180:*}[30%]&lt;BR/&gt;{198.32.112.31:2121, *:2121}[20%]&lt;BR/&gt;{198.32.112.31:2122, *:2122}[20%]&lt;BR/&gt;{198.32.112.31:4121, *:4121}[20%]&lt;BR/&gt;{198.32.112.31:*, 199.92.161.182:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (30%)&lt;BR/&gt; 4121: (20%)&lt;BR/&gt; 2122: (20%)&lt;BR/&gt; 2121: (20%)&lt;BR/&gt; 54077: (5%)&gt;];
}
9547--13834[label="1;10pkt 10fpkt"];
9547--16355[label="1;10pkt 10fpkt"];
13834--16355[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="199.92.161.180" src_ip="198.32.112.31"/>
      <filter dst_ip="199.92.161.182" src_ip="198.32.112.31"/>
      <filter src_ip="198.32.112.31"/>
      <filter dst_port="4121" src_ip="198.32.112.31" src_port="4121"/>
      <filter dst_port="2122" src_ip="198.32.112.31" src_port="2122"/>
      <filter dst_port="2121" src_ip="198.32.112.31" src_port="2121"/>
    </slice>
    <from sec="1284008456" usec="0"/>
    <to sec="1284009265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.170.123.31"/>
    </slice>
    <from sec="1284009089" usec="0"/>
    <to sec="1284009103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
9565[label="216.4.73.32;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13846[label="216.4.73.32;2pkt 2fpkt", shape=invtriangle, color=brown];
16358[label="216.4.73.32;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.4.73.32:1813, 199.56.33.114:5200}[50%]&lt;BR/&gt;{216.4.73.32:28973, 199.56.33.114:41325}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41325: (25%)&lt;BR/&gt; 28973: (25%)&lt;BR/&gt; 5200: (25%)&lt;BR/&gt; 1813: (25%)&gt;];
}
9565--13846[label="1;2pkt 2fpkt"];
9565--16358[label="1;2pkt 2fpkt"];
13846--16358[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.33.114" dst_port="41325" src_ip="216.4.73.32" src_port="28973"/>
      <filter dst_ip="199.56.33.114" dst_port="5200" src_ip="216.4.73.32" src_port="1813"/>
    </slice>
    <from sec="1284009122" usec="0"/>
    <to sec="1284009156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.244.128.32"/>
    </slice>
    <from sec="1284009117" usec="0"/>
    <to sec="1284009146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
9580[label="145.105.59.33;23pkt 23fpkt", shape=pentagon, color=darkviolet];
13851[label="145.105.59.33;23pkt 23fpkt", shape=invtriangle, color=brown];
16362[label="145.105.59.33;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.59.33:*, 3.213.118.138:80}[34.7826%]&lt;BR/&gt;{145.105.59.33:*, 169.119.1.193:80}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8261%)&lt;BR/&gt; 52047: (2.17391%)&lt;BR/&gt; 52046: (2.17391%)&lt;BR/&gt; 52045: (2.17391%)&lt;BR/&gt; 52044: (2.17391%)&gt;];
}
9580--13851[label="1;23pkt 23fpkt"];
9580--16362[label="1;23pkt 23fpkt"];
13851--16362[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="3.213.118.138" dst_port="80" src_ip="145.105.59.33"/>
      <filter dst_ip="169.119.1.193" dst_port="80" src_ip="145.105.59.33"/>
    </slice>
    <from sec="1284009131" usec="0"/>
    <to sec="1284009209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.52.140.33"/>
    </slice>
    <from sec="1284009189" usec="0"/>
    <to sec="1284009195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.37.201.33"/>
    </slice>
    <from sec="1284008702" usec="0"/>
    <to sec="1284008711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.124.217.33"/>
    </slice>
    <from sec="1284009060" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1096{
style=filled;
color=gray75;
9597[label="167.190.28.34;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13864[label="167.190.28.34;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1096[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.28.34:3504, 212.158.157.245:80}[25%]&lt;BR/&gt;{167.190.28.34:3505, 212.158.157.245:80}[25%]&lt;BR/&gt;{167.190.28.34:3507, 212.158.157.245:80}[25%]&lt;BR/&gt;{167.190.28.34:3509, 212.158.157.245:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3509: (14.2857%)&lt;BR/&gt; 3507: (14.2857%)&lt;BR/&gt; 3505: (14.2857%)&lt;BR/&gt; 3504: (7.14286%)&gt;];
}
9597--13864[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.158.157.245" dst_port="80" src_ip="167.190.28.34" src_port="3509"/>
      <filter dst_ip="212.158.157.245" dst_port="80" src_ip="167.190.28.34" src_port="3507"/>
      <filter dst_ip="212.158.157.245" dst_port="80" src_ip="167.190.28.34" src_port="3505"/>
      <filter dst_ip="212.158.157.245" dst_port="80" src_ip="167.190.28.34" src_port="3504"/>
    </slice>
    <from sec="1284009293" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.134.52.34"/>
    </slice>
    <from sec="1284009075" usec="0"/>
    <to sec="1284009136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.25.54.34"/>
    </slice>
    <from sec="1284008761" usec="0"/>
    <to sec="1284008773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.32.56.34"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284008972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.93.154.34"/>
    </slice>
    <from sec="1284008955" usec="0"/>
    <to sec="1284008970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.13.0.35"/>
    </slice>
    <from sec="1284008971" usec="0"/>
    <to sec="1284009037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
9612[label="137.5.3.35;31pkt 31fpkt", shape=pentagon, color=darkviolet];
13872[label="137.5.3.35;30pkt 30fpkt", shape=invtriangle, color=brown];
16374[label="137.5.3.35;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.5.3.35:3128, 221.220.40.101:*}[29.0323%]&lt;BR/&gt;{137.5.3.35:3127, *:*}[25.8065%]&lt;BR/&gt;{137.5.3.35:*, 52.206.46.67:*}[22.5806%]&lt;BR/&gt;{137.5.3.35:*, 221.220.40.100:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (17.9348%)&lt;BR/&gt; 3127: (13.0435%)&lt;BR/&gt; 4121: (6.52174%)&lt;BR/&gt; 2122: (6.52174%)&lt;BR/&gt; 0: (6.52174%)&gt;];
}
9612--13872[label="1;30pkt 30fpkt"];
9612--16374[label="1;31pkt 31fpkt"];
13872--16374[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="221.220.40.100" src_ip="137.5.3.35"/>
      <filter dst_ip="52.206.46.67" src_ip="137.5.3.35"/>
      <filter src_ip="137.5.3.35" src_port="3127"/>
      <filter dst_ip="221.220.40.101" src_ip="137.5.3.35" src_port="3128"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.198.17.35"/>
    </slice>
    <from sec="1284009045" usec="0"/>
    <to sec="1284009129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.21.35"/>
    </slice>
    <from sec="1284009128" usec="0"/>
    <to sec="1284009162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1105{
style=filled;
color=gray75;
9618[label="199.57.33.35;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13875[label="199.57.33.35;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1105[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.57.33.35:*, 167.190.180.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63100: (7.69231%)&lt;BR/&gt; 62300: (7.69231%)&lt;BR/&gt; 62116: (7.69231%)&lt;BR/&gt; 61254: (7.69231%)&gt;];
}
9618--13875[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="199.57.33.35"/>
    </slice>
    <from sec="1284009238" usec="0"/>
    <to sec="1284009270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.69.69.35"/>
    </slice>
    <from sec="1284008508" usec="0"/>
    <to sec="1284009036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
9621[label="56.134.69.35;39pkt 39fpkt", shape=pentagon, color=darkviolet];
13877[label="56.134.69.35;39pkt 39fpkt", shape=invtriangle, color=brown];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.134.69.35:*, 167.190.53.18:515}[82.0513%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 515: (41.0256%)&lt;BR/&gt; 51262: (2.5641%)&lt;BR/&gt; 51282: (1.28205%)&lt;BR/&gt; 51267: (1.28205%)&lt;BR/&gt; 31334: (1.28205%)&gt;];
}
9621--13877[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.53.18" dst_port="515" src_ip="56.134.69.35"/>
    </slice>
    <from sec="1284008418" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1108{
style=filled;
color=gray75;
9622[label="29.41.88.35;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13878[label="29.41.88.35;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1108[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.41.88.35:16293, 167.190.180.29:80}[50%]&lt;BR/&gt;{29.41.88.35:16294, 167.190.180.29:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16294: (33.3333%)&lt;BR/&gt; 16293: (16.6667%)&gt;];
}
9622--13878[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.29" dst_port="80" src_ip="29.41.88.35" src_port="16294"/>
      <filter dst_ip="167.190.180.29" dst_port="80" src_ip="29.41.88.35" src_port="16293"/>
    </slice>
    <from sec="1284009164" usec="0"/>
    <to sec="1284009179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.206.122.35"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.54.139.35"/>
    </slice>
    <from sec="1284008674" usec="0"/>
    <to sec="1284008683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.139.41.36"/>
    </slice>
    <from sec="1284009135" usec="0"/>
    <to sec="1284009274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.46.54.36"/>
    </slice>
    <from sec="1284008507" usec="0"/>
    <to sec="1284008541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.48.110.36"/>
    </slice>
    <from sec="1284008836" usec="0"/>
    <to sec="1284008924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1114{
style=filled;
color=gray75;
1211[label="198.45.153.4;d;212pkt 212fpkt", shape=diamond, color=yellow];
3037[label="169.118.239.51;s;44pkt 44fpkt", shape=diamond, color=yellow];
3481[label="198.45.60.72;d;121pkt 121fpkt", shape=diamond, color=yellow];
5259[label="209.160.67.145;s;31pkt 31fpkt", shape=diamond, color=yellow];
5542[label="27.39.65.180;s;28pkt 28fpkt", shape=diamond, color=yellow];
6250[label="32.13.117.7;s;67pkt 67fpkt", shape=diamond, color=yellow];
8394[label="198.45.60.72;d;93pkt 93fpkt", shape=hexagon, color=black];
9650[label="32.253.116.36;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12303[label="33.73.177.178;22pkt 22fpkt", shape=pentagon, color=darkviolet];
12336[label="27.39.65.180;28pkt 28fpkt", shape=pentagon, color=darkviolet];
13896[label="32.253.116.36;27pkt 27fpkt", shape=invtriangle, color=brown];
15463[label="33.73.177.178;22pkt 22fpkt", shape=invtriangle, color=brown];
15489[label="27.39.65.180;28pkt 28fpkt", shape=invtriangle, color=brown];
17337[label="33.73.177.178;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1114[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 198.45.153.4:80}[60.0567%]&lt;BR/&gt;{*:*, 198.45.60.72:80}[33.711%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5472%)&lt;BR/&gt; 46108: (0.582147%)&lt;BR/&gt; 62315: (0.323415%)&lt;BR/&gt; 60176: (0.323415%)&lt;BR/&gt; 60022: (0.323415%)&gt;];
}
1211--1505[label="0.00471698;1pkt 1fpkt"];
1211--3037[label="1;44pkt 44fpkt"];
1211--5542[label="1;28pkt 28fpkt"];
1211--6250[label="0.955224;64pkt 64fpkt"];
1211--6839[label="0.00471698;1pkt 1fpkt"];
1211--8829[label="0.00471698;1pkt 1fpkt"];
1211--8884[label="0.0943396;20pkt 20fpkt"];
1211--8894[label="0.0566038;12pkt 12fpkt"];
1211--8902[label="0.0377358;8pkt 8fpkt"];
1211--8909[label="0.0566038;12pkt 12fpkt"];
1211--9650[label="0.392857;11pkt 11fpkt"];
1211--10764[label="0.00471698;1pkt 1fpkt"];
1211--12029[label="0.1;1pkt 1fpkt"];
1211--12336[label="1;28pkt 28fpkt"];
1211--13896[label="0.407407;11pkt 11fpkt"];
1211--14545[label="0.00471698;1pkt 1fpkt"];
1211--15300[label="0.1;1pkt 1fpkt"];
1211--15489[label="1;28pkt 28fpkt"];
1211--16814[label="0.00471698;1pkt 1fpkt"];
3037--8884[label="0.340909;15pkt 15fpkt"];
3481--5259[label="0.967742;30pkt 30fpkt"];
3481--6839[label="0.00826446;1pkt 1fpkt"];
3481--8394[label="1;93pkt 93fpkt"];
3481--8829[label="0.00826446;1pkt 1fpkt"];
3481--8884[label="0.0578512;7pkt 7fpkt"];
3481--8894[label="0.0661157;8pkt 8fpkt"];
3481--8902[label="0.0661157;8pkt 8fpkt"];
3481--8909[label="0.0909091;11pkt 11fpkt"];
3481--9650[label="0.0357143;1pkt 1fpkt"];
3481--10764[label="0.00826446;1pkt 1fpkt"];
3481--12303[label="1;22pkt 22fpkt"];
3481--13896[label="0.037037;1pkt 1fpkt"];
3481--14545[label="0.00826446;1pkt 1fpkt"];
3481--15463[label="1;22pkt 22fpkt"];
3481--16814[label="0.00826446;1pkt 1fpkt"];
3481--17337[label="1;22pkt 22fpkt"];
5259--8394[label="0.83871;26pkt 26fpkt"];
5259--8495[label="0.0322581;1pkt 1fpkt"];
5259--8884[label="0.0967742;3pkt 3fpkt"];
5259--8894[label="0.0967742;3pkt 3fpkt"];
5259--8902[label="0.0645161;2pkt 2fpkt"];
5259--8909[label="0.0645161;2pkt 2fpkt"];
5542--8902[label="0.0357143;1pkt 1fpkt"];
5542--12336[label="1;28pkt 28fpkt"];
5542--15489[label="1;28pkt 28fpkt"];
6250--7263[label="0.0149254;1pkt 1fpkt"];
6250--7878[label="0.0149254;1pkt 1fpkt"];
6250--8841[label="0.0149254;1pkt 1fpkt"];
6250--8884[label="0.0447761;3pkt 3fpkt"];
6250--8894[label="0.119403;8pkt 8fpkt"];
6250--8902[label="0.0447761;3pkt 3fpkt"];
6250--8909[label="0.119403;8pkt 8fpkt"];
8394--8829[label="0.0107527;1pkt 1fpkt"];
8394--8884[label="0.0752688;7pkt 7fpkt"];
8394--8894[label="0.0860215;8pkt 8fpkt"];
8394--8902[label="0.0860215;8pkt 8fpkt"];
8394--9650[label="0.0357143;1pkt 1fpkt"];
8394--10764[label="0.0107527;1pkt 1fpkt"];
8394--12303[label="0.772727;17pkt 17fpkt"];
8394--13896[label="0.037037;1pkt 1fpkt"];
8394--14545[label="0.0107527;1pkt 1fpkt"];
8394--15463[label="0.772727;17pkt 17fpkt"];
8394--16814[label="0.0107527;1pkt 1fpkt"];
8394--17337[label="0.772727;17pkt 17fpkt"];
9650--13896[label="1;27pkt 27fpkt"];
12303--15463[label="1;22pkt 22fpkt"];
12303--17337[label="1;22pkt 22fpkt"];
12336--15489[label="1;28pkt 28fpkt"];
15463--17337[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.153.4" dst_port="80"/>
      <filter dst_ip="198.45.60.72" dst_port="80"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1115{
style=filled;
color=gray75;
9653[label="169.119.125.36;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13897[label="169.119.125.36;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1115[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.119.125.36:80, 199.56.42.79:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50174: (4.34783%)&lt;BR/&gt; 50173: (4.34783%)&lt;BR/&gt; 50172: (4.34783%)&lt;BR/&gt; 50171: (4.34783%)&gt;];
}
9653--13897[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.42.79" src_ip="169.119.125.36" src_port="80"/>
    </slice>
    <from sec="1284009207" usec="0"/>
    <to sec="1284009260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.42.158.36"/>
    </slice>
    <from sec="1284008681" usec="0"/>
    <to sec="1284008755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.73.192.36"/>
    </slice>
    <from sec="1284008990" usec="0"/>
    <to sec="1284009028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.125.232.36"/>
    </slice>
    <from sec="1284009088" usec="0"/>
    <to sec="1284009158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.13.0.37"/>
    </slice>
    <from sec="1284009094" usec="0"/>
    <to sec="1284009124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
9667[label="200.154.74.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13907[label="200.154.74.37;1pkt 1fpkt", shape=invtriangle, color=brown];
16397[label="200.154.74.37;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.154.74.37:80, 145.105.211.23:61785}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61785: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9667--13907[label="1;1pkt 1fpkt"];
9667--16397[label="1;1pkt 1fpkt"];
13907--16397[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.211.23" dst_port="61785" src_ip="200.154.74.37" src_port="80"/>
    </slice>
    <from sec="1284008927" usec="0"/>
    <to sec="1284009118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1121{
style=filled;
color=gray75;
9679[label="20.162.83.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13915[label="20.162.83.38;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1121[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.162.83.38:2274, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2274: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9679--13915[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="20.162.83.38" src_port="2274"/>
    </slice>
    <from sec="1284009145" usec="0"/>
    <to sec="1284009290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.237.188.38"/>
    </slice>
    <from sec="1284008798" usec="0"/>
    <to sec="1284008802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.90.45.39"/>
    </slice>
    <from sec="1284009150" usec="0"/>
    <to sec="1284009235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.16.87.39"/>
    </slice>
    <from sec="1284008749" usec="0"/>
    <to sec="1284008763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.168.55.40"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.160.99.40"/>
    </slice>
    <from sec="1284008912" usec="0"/>
    <to sec="1284008918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.64.54.41"/>
    </slice>
    <from sec="1284009246" usec="0"/>
    <to sec="1284009278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="187.12.174.41"/>
    </slice>
    <from sec="1284008832" usec="0"/>
    <to sec="1284008856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1129{
style=filled;
color=gray75;
9747[label="169.32.182.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13953[label="169.32.182.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1129[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.32.182.41:80, 199.56.40.19:53808}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53808: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9747--13953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.40.19" dst_port="53808" src_ip="169.32.182.41" src_port="80"/>
    </slice>
    <from sec="1284009249" usec="0"/>
    <to sec="1284009252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
9749[label="27.176.202.41;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13955[label="27.176.202.41;6pkt 6fpkt", shape=invtriangle, color=brown];
16432[label="27.176.202.41;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.176.202.41:*, 167.190.180.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49178: (8.33333%)&lt;BR/&gt; 49177: (8.33333%)&lt;BR/&gt; 49175: (8.33333%)&lt;BR/&gt; 49174: (8.33333%)&gt;];
}
9749--13955[label="1;6pkt 6fpkt"];
9749--16432[label="1;6pkt 6fpkt"];
13955--16432[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="27.176.202.41"/>
    </slice>
    <from sec="1284009263" usec="0"/>
    <to sec="1284009276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
9754[label="210.173.12.42;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13959[label="210.173.12.42;8pkt 8fpkt", shape=invtriangle, color=brown];
16435[label="210.173.12.42;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.173.12.42:*, 167.190.180.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65441: (6.25%)&lt;BR/&gt; 63207: (6.25%)&lt;BR/&gt; 63059: (6.25%)&lt;BR/&gt; 62921: (6.25%)&gt;];
}
9754--13959[label="1;8pkt 8fpkt"];
9754--16435[label="1;8pkt 8fpkt"];
13959--16435[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="210.173.12.42"/>
    </slice>
    <from sec="1284009235" usec="0"/>
    <to sec="1284009247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.45.144.42"/>
    </slice>
    <from sec="1284008970" usec="0"/>
    <to sec="1284008989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="189.84.208.42"/>
    </slice>
    <from sec="1284008917" usec="0"/>
    <to sec="1284009037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.192.213.43"/>
    </slice>
    <from sec="1284009178" usec="0"/>
    <to sec="1284009191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
9800[label="9.49.84.44;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13987[label="9.49.84.44;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.49.84.44:1417, 203.180.102.44:445}[20%]&lt;BR/&gt;{9.49.84.44:1587, 203.180.100.68:445}[20%]&lt;BR/&gt;{9.49.84.44:4366, 203.180.103.103:445}[20%]&lt;BR/&gt;{9.49.84.44:2550, 203.180.100.185:445}[20%]&lt;BR/&gt;{9.49.84.44:4627, 203.180.103.196:445}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4627: (10%)&lt;BR/&gt; 4366: (10%)&lt;BR/&gt; 2550: (10%)&lt;BR/&gt; 1587: (10%)&gt;];
}
9800--13987[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="203.180.103.196" dst_port="445" src_ip="9.49.84.44" src_port="4627"/>
      <filter dst_ip="203.180.100.185" dst_port="445" src_ip="9.49.84.44" src_port="2550"/>
      <filter dst_ip="203.180.103.103" dst_port="445" src_ip="9.49.84.44" src_port="4366"/>
      <filter dst_ip="203.180.100.68" dst_port="445" src_ip="9.49.84.44" src_port="1587"/>
      <filter dst_ip="203.180.102.44" dst_port="445" src_ip="9.49.84.44" src_port="1417"/>
    </slice>
    <from sec="1284008577" usec="0"/>
    <to sec="1284009075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1136{
style=filled;
color=gray75;
9809[label="145.105.171.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13992[label="145.105.171.44;1pkt 1fpkt", shape=invtriangle, color=brown];
16452[label="145.105.171.44;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1136[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.171.44:1662, 170.57.14.133:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1662: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
9809--13992[label="1;1pkt 1fpkt"];
9809--16452[label="1;1pkt 1fpkt"];
13992--16452[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.57.14.133" dst_port="443" src_ip="145.105.171.44" src_port="1662"/>
    </slice>
    <from sec="1284008407" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.42.196.44"/>
    </slice>
    <from sec="1284009039" usec="0"/>
    <to sec="1284009099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.17.202.44"/>
    </slice>
    <from sec="1284009189" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1139{
style=filled;
color=gray75;
9824[label="145.105.47.45;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14001[label="145.105.47.45;8pkt 8fpkt", shape=invtriangle, color=brown];
16459[label="145.105.47.45;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1139[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.47.45:*, 202.18.116.224:80}[75%]&lt;BR/&gt;{145.105.47.45:*, 198.33.144.10:110}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 110: (12.5%)&lt;BR/&gt; 49914: (6.25%)&lt;BR/&gt; 49913: (6.25%)&lt;BR/&gt; 49912: (6.25%)&gt;];
}
9824--14001[label="1;8pkt 8fpkt"];
9824--16459[label="1;8pkt 8fpkt"];
14001--16459[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="202.18.116.224" dst_port="80" src_ip="145.105.47.45"/>
      <filter dst_ip="198.33.144.10" dst_port="110" src_ip="145.105.47.45"/>
    </slice>
    <from sec="1284009054" usec="0"/>
    <to sec="1284009202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
9825[label="198.45.62.45;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14002[label="198.45.62.45;6pkt 6fpkt", shape=invtriangle, color=brown];
16460[label="198.45.62.45;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.62.45:80, 35.104.160.38:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61254: (8.33333%)&lt;BR/&gt; 60446: (8.33333%)&lt;BR/&gt; 60158: (8.33333%)&lt;BR/&gt; 58986: (8.33333%)&gt;];
}
9825--14002[label="1;6pkt 6fpkt"];
9825--16460[label="1;6pkt 6fpkt"];
14002--16460[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="35.104.160.38" src_ip="198.45.62.45" src_port="80"/>
    </slice>
    <from sec="1284008515" usec="0"/>
    <to sec="1284009195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1141{
style=filled;
color=gray75;
9827[label="209.160.98.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14003[label="209.160.98.45;2pkt 2fpkt", shape=invtriangle, color=brown];
16461[label="209.160.98.45;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1141[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.160.98.45:46681, 167.190.225.156:25}[50%]&lt;BR/&gt;{209.160.98.45:49522, 167.190.225.156:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 49522: (25%)&lt;BR/&gt; 46681: (25%)&gt;];
}
9827--14003[label="1;2pkt 2fpkt"];
9827--16461[label="1;2pkt 2fpkt"];
14003--16461[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.225.156" dst_port="25" src_ip="209.160.98.45" src_port="49522"/>
      <filter dst_ip="167.190.225.156" dst_port="25" src_ip="209.160.98.45" src_port="46681"/>
    </slice>
    <from sec="1284009125" usec="0"/>
    <to sec="1284009289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.45.99.45"/>
    </slice>
    <from sec="1284009069" usec="0"/>
    <to sec="1284009083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
9829[label="48.3.107.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14005[label="48.3.107.45;1pkt 1fpkt", shape=invtriangle, color=brown];
16462[label="48.3.107.45;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.3.107.45:45556, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45556: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9829--14005[label="1;1pkt 1fpkt"];
9829--16462[label="1;1pkt 1fpkt"];
14005--16462[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="48.3.107.45" src_port="45556"/>
    </slice>
    <from sec="1284009174" usec="0"/>
    <to sec="1284009188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1144{
style=filled;
color=gray75;
9842[label="64.10.32.46;19pkt 19fpkt", shape=pentagon, color=darkviolet];
14010[label="64.10.32.46;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1144[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.10.32.46:*, 167.190.180.29:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43050: (2.63158%)&lt;BR/&gt; 43049: (2.63158%)&lt;BR/&gt; 43048: (2.63158%)&lt;BR/&gt; 43047: (2.63158%)&gt;];
}
9842--14010[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.29" dst_port="80" src_ip="64.10.32.46"/>
    </slice>
    <from sec="1284009254" usec="0"/>
    <to sec="1284009280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.42.236.46"/>
    </slice>
    <from sec="1284009027" usec="0"/>
    <to sec="1284009154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="186.139.35.48"/>
    </slice>
    <from sec="1284008932" usec="0"/>
    <to sec="1284008942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1147{
style=filled;
color=gray75;
9869[label="210.173.38.48;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14025[label="210.173.38.48;3pkt 3fpkt", shape=invtriangle, color=brown];
16477[label="210.173.38.48;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1147[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.173.38.48:80, 167.190.7.36:52540}[33.3333%]&lt;BR/&gt;{210.173.38.48:80, 167.190.7.36:52542}[33.3333%]&lt;BR/&gt;{210.173.38.48:80, 167.190.7.36:52553}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52553: (16.6667%)&lt;BR/&gt; 52542: (16.6667%)&lt;BR/&gt; 52540: (16.6667%)&gt;];
}
9869--14025[label="1;3pkt 3fpkt"];
9869--16477[label="1;3pkt 3fpkt"];
14025--16477[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.7.36" dst_port="52553" src_ip="210.173.38.48" src_port="80"/>
      <filter dst_ip="167.190.7.36" dst_port="52542" src_ip="210.173.38.48" src_port="80"/>
      <filter dst_ip="167.190.7.36" dst_port="52540" src_ip="210.173.38.48" src_port="80"/>
    </slice>
    <from sec="1284009198" usec="0"/>
    <to sec="1284009242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
9899[label="145.105.189.49;130pkt 130fpkt", shape=pentagon, color=darkviolet];
14041[label="145.105.189.49;130pkt 130fpkt", shape=invtriangle, color=brown];
16489[label="145.105.189.49;130pkt 130fpkt", shape=invhouse, color=bisque];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.189.49:5027, *:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5027: (45%)&lt;BR/&gt; 80: (2.69231%)&lt;BR/&gt; 443: (2.30769%)&lt;BR/&gt; 65514: (0.384615%)&lt;BR/&gt; 65435: (0.384615%)&gt;];
}
9899--14041[label="1;130pkt 130fpkt"];
9899--16489[label="1;130pkt 130fpkt"];
14041--16489[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.189.49" src_port="5027"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.149.32.50"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284008963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1150{
style=filled;
color=gray75;
9919[label="145.105.119.50;99pkt 99fpkt", shape=pentagon, color=darkviolet];
14053[label="145.105.119.50;99pkt 99fpkt", shape=invtriangle, color=brown];
stat1150[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.119.50:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
9919--14053[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.119.50"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
9920[label="26.46.131.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14054[label="26.46.131.50;1pkt 1fpkt", shape=invtriangle, color=brown];
16499[label="26.46.131.50;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.46.131.50:4663, 199.56.53.107:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4663: (50%)&lt;BR/&gt; 3124: (50%)&gt;];
}
9920--14054[label="1;1pkt 1fpkt"];
9920--16499[label="1;1pkt 1fpkt"];
14054--16499[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.53.107" dst_port="3124" src_ip="26.46.131.50" src_port="4663"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.102.199.50"/>
    </slice>
    <from sec="1284008982" usec="0"/>
    <to sec="1284008989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
9924[label="223.68.244.50;25pkt 25fpkt", shape=pentagon, color=darkviolet];
14056[label="223.68.244.50;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.68.244.50:80, 198.32.104.161:*}[36%]&lt;BR/&gt;{223.68.244.50:80, 167.190.217.196:*}[24%]&lt;BR/&gt;{223.68.244.50:80, 167.190.68.169:*}[20%]&lt;BR/&gt;{223.68.244.50:80, 167.190.27.234:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64243: (2%)&lt;BR/&gt; 64242: (2%)&lt;BR/&gt; 64240: (2%)&lt;BR/&gt; 64238: (2%)&gt;];
}
9924--14056[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.104.161" src_ip="223.68.244.50" src_port="80"/>
      <filter dst_ip="167.190.217.196" src_ip="223.68.244.50" src_port="80"/>
      <filter dst_ip="167.190.27.234" src_ip="223.68.244.50" src_port="80"/>
      <filter dst_ip="167.190.68.169" src_ip="223.68.244.50" src_port="80"/>
    </slice>
    <from sec="1284009268" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
9941[label="23.193.199.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14067[label="23.193.199.51;1pkt 1fpkt", shape=invtriangle, color=brown];
16509[label="23.193.199.51;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.193.199.51:4446, 145.105.226.41:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4446: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9941--14067[label="1;1pkt 1fpkt"];
9941--16509[label="1;1pkt 1fpkt"];
14067--16509[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.226.41" dst_port="80" src_ip="23.193.199.51" src_port="4446"/>
    </slice>
    <from sec="1284008461" usec="0"/>
    <to sec="1284008645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
9945[label="198.189.23.52;196pkt 196fpkt", shape=pentagon, color=darkviolet];
14071[label="198.189.23.52;196pkt 196fpkt", shape=invtriangle, color=brown];
16513[label="198.189.23.52;196pkt 196fpkt", shape=invhouse, color=bisque];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.189.23.52:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
9945--14071[label="1;196pkt 196fpkt"];
9945--16513[label="1;196pkt 196fpkt"];
14071--16513[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="198.189.23.52" src_port="5060"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.21.26.52"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1157{
style=filled;
color=gray75;
9959[label="29.45.198.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14078[label="29.45.198.52;1pkt 1fpkt", shape=invtriangle, color=brown];
16516[label="29.45.198.52;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1157[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.45.198.52:14873, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14873: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9959--14078[label="1;1pkt 1fpkt"];
9959--16516[label="1;1pkt 1fpkt"];
14078--16516[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="29.45.198.52" src_port="14873"/>
    </slice>
    <from sec="1284009220" usec="0"/>
    <to sec="1284009231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.12.90.53"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284009045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.37.54"/>
    </slice>
    <from sec="1284008793" usec="0"/>
    <to sec="1284008859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.116.87.54"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284009015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.172.107.54"/>
    </slice>
    <from sec="1284009270" usec="0"/>
    <to sec="1284009274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.23.135.54"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284009106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.110.158.54"/>
    </slice>
    <from sec="1284008547" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.135.212.54"/>
    </slice>
    <from sec="1284008852" usec="0"/>
    <to sec="1284008879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1165{
style=filled;
color=gray75;
10030[label="64.106.92.56;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14113[label="64.106.92.56;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1165[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.106.92.56:8884, 145.105.68.59:5041}[50%]&lt;BR/&gt;{64.106.92.56:8559, 148.36.85.237:5041}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (50%)&lt;BR/&gt; 8884: (25%)&lt;BR/&gt; 8559: (25%)&gt;];
}
10030--14113[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.85.237" dst_port="5041" src_ip="64.106.92.56" src_port="8559"/>
      <filter dst_ip="145.105.68.59" dst_port="5041" src_ip="64.106.92.56" src_port="8884"/>
    </slice>
    <from sec="1284009194" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
473[label="167.190.109.86;d;104pkt 104fpkt", shape=diamond, color=yellow];
476[label="212.201.88.180;s;21pkt 21fpkt", shape=diamond, color=yellow];
888[label="145.105.65.95;d;33pkt 33fpkt", shape=diamond, color=yellow];
2296[label="212.201.88.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
2346[label="169.37.157.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
2540[label="212.201.88.130;s;1pkt 1fpkt", shape=diamond, color=yellow];
3817[label="212.201.88.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
6715[label="145.105.65.95;d;18pkt 18fpkt", shape=hexagon, color=black];
10031[label="88.228.98.56;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13008[label="208.28.160.221;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14114[label="88.228.98.56;2pkt 2fpkt", shape=invtriangle, color=brown];
16538[label="88.228.98.56;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 167.190.109.86:*}[75.9124%]&lt;BR/&gt;{*:80, 145.105.65.95:*}[21.8978%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7685%)&lt;BR/&gt; 54754: (1.23153%)&lt;BR/&gt; 53773: (0.985222%)&lt;BR/&gt; 11218: (0.985222%)&lt;BR/&gt; 54606: (0.738916%)&gt;];
}
473--476[label="1;21pkt 21fpkt"];
473--2346[label="1;2pkt 2fpkt"];
473--2540[label="1;1pkt 1fpkt"];
473--3817[label="1;1pkt 1fpkt"];
473--10031[label="0.5;1pkt 1fpkt"];
473--13008[label="1;16pkt 16fpkt"];
473--14114[label="0.5;1pkt 1fpkt"];
473--16538[label="0.5;1pkt 1fpkt"];
888--2296[label="1;1pkt 1fpkt"];
888--2897[label="0.030303;1pkt 1fpkt"];
888--5112[label="0.030303;1pkt 1fpkt"];
888--6715[label="1;18pkt 18fpkt"];
888--8589[label="0.030303;1pkt 1fpkt"];
888--8872[label="0.030303;1pkt 1fpkt"];
888--9515[label="0.030303;1pkt 1fpkt"];
888--10031[label="0.5;1pkt 1fpkt"];
888--13815[label="0.030303;1pkt 1fpkt"];
888--14114[label="0.5;1pkt 1fpkt"];
888--16344[label="0.030303;1pkt 1fpkt"];
888--16538[label="0.5;1pkt 1fpkt"];
2296--6715[label="1;1pkt 1fpkt"];
6715--10031[label="0.5;1pkt 1fpkt"];
6715--14114[label="0.5;1pkt 1fpkt"];
6715--16538[label="0.5;1pkt 1fpkt"];
10031--14114[label="1;2pkt 2fpkt"];
10031--16538[label="1;2pkt 2fpkt"];
14114--16538[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.109.86" src_port="80"/>
      <filter dst_ip="145.105.65.95" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1167{
style=filled;
color=gray75;
10038[label="42.48.162.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14120[label="42.48.162.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1167[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.48.162.56:52750, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52750: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10038--14120[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="42.48.162.56" src_port="52750"/>
    </slice>
    <from sec="1284008627" usec="0"/>
    <to sec="1284009247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.139.71.57"/>
    </slice>
    <from sec="1284009177" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
10054[label="46.70.168.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14129[label="46.70.168.57;1pkt 1fpkt", shape=invtriangle, color=brown];
16546[label="46.70.168.57;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.70.168.57:80, 167.190.180.28:34886}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34886: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10054--14129[label="1;1pkt 1fpkt"];
10054--16546[label="1;1pkt 1fpkt"];
14129--16546[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.28" dst_port="34886" src_ip="46.70.168.57" src_port="80"/>
    </slice>
    <from sec="1284009180" usec="0"/>
    <to sec="1284009182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.133.28.58"/>
    </slice>
    <from sec="1284008409" usec="0"/>
    <to sec="1284009287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.52.135.58"/>
    </slice>
    <from sec="1284008956" usec="0"/>
    <to sec="1284008965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.4.42.59"/>
    </slice>
    <from sec="1284008951" usec="0"/>
    <to sec="1284008961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.82.69.59"/>
    </slice>
    <from sec="1284008758" usec="0"/>
    <to sec="1284008789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1174{
style=filled;
color=gray75;
10096[label="186.87.107.60;136pkt 136fpkt", shape=pentagon, color=darkviolet];
14155[label="186.87.107.60;136pkt 136fpkt", shape=invtriangle, color=brown];
16566[label="186.87.107.60;136pkt 136fpkt", shape=invhouse, color=bisque];
stat1174[shape=component, label=&lt;Rules:&lt;BR/&gt;{186.87.107.60:*, 167.190.180.28:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 1686: (0.367647%)&lt;BR/&gt; 1685: (0.367647%)&lt;BR/&gt; 1684: (0.367647%)&lt;BR/&gt; 1683: (0.367647%)&gt;];
}
10096--14155[label="1;136pkt 136fpkt"];
10096--16566[label="1;136pkt 136fpkt"];
14155--16566[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.28" dst_port="3124" src_ip="186.87.107.60"/>
    </slice>
    <from sec="1284009135" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1175{
style=filled;
color=gray75;
10119[label="40.35.17.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14167[label="40.35.17.62;1pkt 1fpkt", shape=invtriangle, color=brown];
16577[label="40.35.17.62;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1175[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.35.17.62:80, 167.190.30.128:49271}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49271: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10119--14167[label="1;1pkt 1fpkt"];
10119--16577[label="1;1pkt 1fpkt"];
14167--16577[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.30.128" dst_port="49271" src_ip="40.35.17.62" src_port="80"/>
    </slice>
    <from sec="1284009257" usec="0"/>
    <to sec="1284009265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.130.81.62"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1177{
style=filled;
color=gray75;
10144[label="27.74.18.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14177[label="27.74.18.64;1pkt 1fpkt", shape=invtriangle, color=brown];
16583[label="27.74.18.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1177[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.74.18.64:2208, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2208: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10144--14177[label="1;1pkt 1fpkt"];
10144--16583[label="1;1pkt 1fpkt"];
14177--16583[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="27.74.18.64" src_port="2208"/>
    </slice>
    <from sec="1284008650" usec="0"/>
    <to sec="1284009277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.54.54.64"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.74.80.64"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284008991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.110.117.64"/>
    </slice>
    <from sec="1284008710" usec="0"/>
    <to sec="1284008754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.224.86.66"/>
    </slice>
    <from sec="1284008799" usec="0"/>
    <to sec="1284008808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1182{
style=filled;
color=gray75;
10193[label="34.127.88.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14207[label="34.127.88.66;1pkt 1fpkt", shape=invtriangle, color=brown];
16602[label="34.127.88.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1182[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.127.88.66:60692, 199.56.52.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60692: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10193--14207[label="1;1pkt 1fpkt"];
10193--16602[label="1;1pkt 1fpkt"];
14207--16602[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.98" dst_port="80" src_ip="34.127.88.66" src_port="60692"/>
    </slice>
    <from sec="1284009286" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.40.184.66"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284009003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.91.76.68"/>
    </slice>
    <from sec="1284008732" usec="0"/>
    <to sec="1284008749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.222.47.69"/>
    </slice>
    <from sec="1284008602" usec="0"/>
    <to sec="1284008620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.252.52.69"/>
    </slice>
    <from sec="1284008972" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="186.143.58.69"/>
    </slice>
    <from sec="1284008903" usec="0"/>
    <to sec="1284008907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
10260[label="145.105.70.69;34pkt 34fpkt", shape=pentagon, color=darkviolet];
14247[label="145.105.70.69;34pkt 34fpkt", shape=invtriangle, color=brown];
16627[label="145.105.70.69;34pkt 34fpkt", shape=invhouse, color=bisque];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.70.69:*, 198.33.54.80:80}[35.2941%]&lt;BR/&gt;{145.105.70.69:*, 198.33.54.71:80}[32.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5294%)&lt;BR/&gt; 1312: (1.47059%)&lt;BR/&gt; 1310: (1.47059%)&lt;BR/&gt; 1308: (1.47059%)&lt;BR/&gt; 1306: (1.47059%)&gt;];
}
10260--14247[label="1;34pkt 34fpkt"];
10260--16627[label="1;34pkt 34fpkt"];
14247--16627[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="198.33.54.80" dst_port="80" src_ip="145.105.70.69"/>
      <filter dst_ip="198.33.54.71" dst_port="80" src_ip="145.105.70.69"/>
    </slice>
    <from sec="1284009191" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.80.195.69"/>
    </slice>
    <from sec="1284008780" usec="0"/>
    <to sec="1284008817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.36.223.69"/>
    </slice>
    <from sec="1284008932" usec="0"/>
    <to sec="1284008992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1192{
style=filled;
color=gray75;
10315[label="218.184.27.72;733pkt 733fpkt", shape=pentagon, color=darkviolet];
14279[label="218.184.27.72;733pkt 733fpkt", shape=invtriangle, color=brown];
stat1192[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.184.27.72:25511, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25511: (50%)&lt;BR/&gt; 59658: (0.136426%)&lt;BR/&gt; 56674: (0.136426%)&lt;BR/&gt; 35597: (0.136426%)&lt;BR/&gt; 25442: (0.136426%)&gt;];
}
10315--14279[label="1;733pkt 733fpkt"];
</description>
    <slice>
      <filter src_ip="218.184.27.72" src_port="25511"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.132.77.72"/>
    </slice>
    <from sec="1284008422" usec="0"/>
    <to sec="1284008433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.138.236.72"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.70.91.73"/>
    </slice>
    <from sec="1284009037" usec="0"/>
    <to sec="1284009051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1196{
style=filled;
color=gray75;
10350[label="220.178.178.73;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14304[label="220.178.178.73;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1196[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.178.178.73:80, 167.190.130.132:59805}[33.3333%]&lt;BR/&gt;{220.178.178.73:80, 167.190.130.132:59806}[33.3333%]&lt;BR/&gt;{220.178.178.73:80, 167.190.130.132:59808}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59808: (16.6667%)&lt;BR/&gt; 59806: (16.6667%)&lt;BR/&gt; 59805: (16.6667%)&gt;];
}
10350--14304[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.130.132" dst_port="59808" src_ip="220.178.178.73" src_port="80"/>
      <filter dst_ip="167.190.130.132" dst_port="59806" src_ip="220.178.178.73" src_port="80"/>
      <filter dst_ip="167.190.130.132" dst_port="59805" src_ip="220.178.178.73" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1197{
style=filled;
color=gray75;
10357[label="17.17.10.74;23pkt 23fpkt", shape=pentagon, color=darkviolet];
14306[label="17.17.10.74;23pkt 23fpkt", shape=invtriangle, color=brown];
16663[label="17.17.10.74;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1197[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.17.10.74:*, 167.190.180.30:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49779: (2.17391%)&lt;BR/&gt; 49778: (2.17391%)&lt;BR/&gt; 49777: (2.17391%)&lt;BR/&gt; 49776: (2.17391%)&gt;];
}
10357--14306[label="1;23pkt 23fpkt"];
10357--16663[label="1;23pkt 23fpkt"];
14306--16663[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.30" dst_port="80" src_ip="17.17.10.74"/>
    </slice>
    <from sec="1284009261" usec="0"/>
    <to sec="1284009271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.35.108.74"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284009008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
10368[label="145.105.141.74;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14314[label="145.105.141.74;6pkt 6fpkt", shape=invtriangle, color=brown];
16668[label="145.105.141.74;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.141.74:*, 210.32.163.59:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60150: (8.33333%)&lt;BR/&gt; 59420: (8.33333%)&lt;BR/&gt; 54073: (8.33333%)&lt;BR/&gt; 49478: (8.33333%)&gt;];
}
10368--14314[label="1;6pkt 6fpkt"];
10368--16668[label="1;6pkt 6fpkt"];
14314--16668[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="210.32.163.59" dst_port="80" src_ip="145.105.141.74"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="169.48.26.75"/>
    </slice>
    <from sec="1284008875" usec="0"/>
    <to sec="1284008903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.138.115.75"/>
    </slice>
    <from sec="1284009121" usec="0"/>
    <to sec="1284009130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.173.185.75"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.157.102.76"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.4.164.76"/>
    </slice>
    <from sec="1284008983" usec="0"/>
    <to sec="1284009028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1205{
style=filled;
color=gray75;
10421[label="38.196.2.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14346[label="38.196.2.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1205[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.196.2.77:80, 145.105.228.141:2597}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2597: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10421--14346[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.228.141" dst_port="2597" src_ip="38.196.2.77" src_port="80"/>
    </slice>
    <from sec="1284008713" usec="0"/>
    <to sec="1284008784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1206{
style=filled;
color=gray75;
10435[label="198.83.101.77;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14355[label="198.83.101.77;2pkt 2fpkt", shape=invtriangle, color=brown];
16695[label="198.83.101.77;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1206[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.83.101.77:80, 167.190.108.249:56547}[50%]&lt;BR/&gt;{198.83.101.77:80, 167.190.108.249:56695}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56695: (25%)&lt;BR/&gt; 56547: (25%)&gt;];
}
10435--14355[label="1;2pkt 2fpkt"];
10435--16695[label="1;2pkt 2fpkt"];
14355--16695[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.249" dst_port="56695" src_ip="198.83.101.77" src_port="80"/>
      <filter dst_ip="167.190.108.249" dst_port="56547" src_ip="198.83.101.77" src_port="80"/>
    </slice>
    <from sec="1284009223" usec="0"/>
    <to sec="1284009236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.45.128.77"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.240.159.77"/>
    </slice>
    <from sec="1284009079" usec="0"/>
    <to sec="1284009123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.96.138.78"/>
    </slice>
    <from sec="1284009119" usec="0"/>
    <to sec="1284009122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.24.144.78"/>
    </slice>
    <from sec="1284008411" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.78.21.79"/>
    </slice>
    <from sec="1284009130" usec="0"/>
    <to sec="1284009148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1212{
style=filled;
color=gray75;
1629[label="27.212.64.68;d;376pkt 376fpkt", shape=diamond, color=yellow];
10473[label="148.142.74.79;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14377[label="148.142.74.79;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1212[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1433, 27.212.64.68:6000}[93.0946%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6000: (44.6078%)&lt;BR/&gt; 1433: (44.6078%)&lt;BR/&gt; 80: (3.67647%)&lt;BR/&gt; 0: (3.43137%)&lt;BR/&gt; 57267: (0.245098%)&gt;];
}
1629--2654[label="0.00531915;2pkt 2fpkt"];
1629--3415[label="0.00512821;1pkt 1fpkt"];
1629--5229[label="0.00265957;1pkt 1fpkt"];
1629--5782[label="0.00568182;1pkt 1fpkt"];
1629--9976[label="0.00531915;2pkt 2fpkt"];
1629--10473[label="0.0625;1pkt 1fpkt"];
1629--11443[label="0.00265957;1pkt 1fpkt"];
1629--14377[label="0.0625;1pkt 1fpkt"];
10473--14377[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="27.212.64.68" dst_port="6000" src_port="1433"/>
    </slice>
    <from sec="1284008432" usec="0"/>
    <to sec="1284009045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1213{
style=filled;
color=gray75;
10496[label="21.93.80.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14385[label="21.93.80.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1213[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.93.80.80:5041, 145.105.68.59:5041}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (100%)&gt;];
}
10496--14385[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.68.59" dst_port="5041" src_ip="21.93.80.80" src_port="5041"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1214{
style=filled;
color=gray75;
10505[label="25.146.2.81;184pkt 184fpkt", shape=pentagon, color=darkviolet];
14389[label="25.146.2.81;184pkt 184fpkt", shape=invtriangle, color=brown];
stat1214[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.146.2.81:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
10505--14389[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="25.146.2.81" src_port="5060"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1215{
style=filled;
color=gray75;
10517[label="148.36.68.81;36pkt 36fpkt", shape=pentagon, color=darkviolet];
14396[label="148.36.68.81;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1215[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.68.81:22313, *:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22313: (47.2222%)&lt;BR/&gt; 443: (2.77778%)&lt;BR/&gt; 63778: (1.38889%)&lt;BR/&gt; 62744: (1.38889%)&lt;BR/&gt; 62598: (1.38889%)&gt;];
}
10517--14396[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="148.36.68.81" src_port="22313"/>
    </slice>
    <from sec="1284008415" usec="0"/>
    <to sec="1284008622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1216{
style=filled;
color=gray75;
10524[label="145.105.226.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14400[label="145.105.226.81;2pkt 2fpkt", shape=invtriangle, color=brown];
16723[label="145.105.226.81;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1216[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.226.81:3561, 169.171.171.5:80}[50%]&lt;BR/&gt;{145.105.226.81:4193, 34.1.180.233:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4193: (25%)&lt;BR/&gt; 3561: (25%)&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
10524--14400[label="1;2pkt 2fpkt"];
10524--16723[label="1;2pkt 2fpkt"];
14400--16723[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="34.1.180.233" dst_port="1863" src_ip="145.105.226.81" src_port="4193"/>
      <filter dst_ip="169.171.171.5" dst_port="80" src_ip="145.105.226.81" src_port="3561"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.81.197.82"/>
    </slice>
    <from sec="1284008930" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.54.201.82"/>
    </slice>
    <from sec="1284009252" usec="0"/>
    <to sec="1284009266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="189.61.145.83"/>
    </slice>
    <from sec="1284008950" usec="0"/>
    <to sec="1284008955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.251.203.83"/>
    </slice>
    <from sec="1284008867" usec="0"/>
    <to sec="1284008874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="120.90.96.85"/>
    </slice>
    <from sec="1284008571" usec="0"/>
    <to sec="1284008590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1224{
style=filled;
color=gray75;
10594[label="198.83.101.85;22pkt 22fpkt", shape=pentagon, color=darkviolet];
14447[label="198.83.101.85;22pkt 22fpkt", shape=invtriangle, color=brown];
16755[label="198.83.101.85;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1224[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.83.101.85:80, 167.190.108.249:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56563: (2.27273%)&lt;BR/&gt; 56541: (2.27273%)&lt;BR/&gt; 56489: (2.27273%)&lt;BR/&gt; 56449: (2.27273%)&gt;];
}
10594--14447[label="1;22pkt 22fpkt"];
10594--16755[label="1;22pkt 22fpkt"];
14447--16755[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.249" src_ip="198.83.101.85" src_port="80"/>
    </slice>
    <from sec="1284009146" usec="0"/>
    <to sec="1284009227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1225{
style=filled;
color=gray75;
10604[label="222.76.217.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14453[label="222.76.217.85;1pkt 1fpkt", shape=invtriangle, color=brown];
16760[label="222.76.217.85;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1225[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.76.217.85:46594, 145.105.160.227:60154}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60154: (50%)&lt;BR/&gt; 46594: (50%)&gt;];
}
10604--14453[label="1;1pkt 1fpkt"];
10604--16760[label="1;1pkt 1fpkt"];
14453--16760[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.160.227" dst_port="60154" src_ip="222.76.217.85" src_port="46594"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1226{
style=filled;
color=gray75;
10610[label="63.3.9.86;109pkt 109fpkt", shape=pentagon, color=darkviolet];
14457[label="63.3.9.86;109pkt 109fpkt", shape=invtriangle, color=brown];
stat1226[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.3.9.86:36354, *:80}[47.7064%]&lt;BR/&gt;{63.3.9.86:36354, *:3128}[37.6147%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36354: (49.5413%)&lt;BR/&gt; 80: (24.3119%)&lt;BR/&gt; 3128: (18.8073%)&lt;BR/&gt; 8080: (6.88073%)&lt;BR/&gt; 52191: (0.458716%)&gt;];
}
10610--14457[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="63.3.9.86" src_port="36354"/>
      <filter dst_port="3128" src_ip="63.3.9.86" src_port="36354"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1227{
style=filled;
color=gray75;
10611[label="199.156.11.86;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14458[label="199.156.11.86;7pkt 7fpkt", shape=invtriangle, color=brown];
16762[label="199.156.11.86;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1227[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.156.11.86:80, 145.105.211.128:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47201: (7.14286%)&lt;BR/&gt; 45334: (7.14286%)&lt;BR/&gt; 43923: (7.14286%)&lt;BR/&gt; 43823: (7.14286%)&gt;];
}
10611--14458[label="1;7pkt 7fpkt"];
10611--16762[label="1;7pkt 7fpkt"];
14458--16762[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.211.128" src_ip="199.156.11.86" src_port="80"/>
    </slice>
    <from sec="1284008845" usec="0"/>
    <to sec="1284008921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.147.63.86"/>
    </slice>
    <from sec="1284009005" usec="0"/>
    <to sec="1284009030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1229{
style=filled;
color=gray75;
10623[label="167.190.110.86;39pkt 39fpkt", shape=pentagon, color=darkviolet];
14465[label="167.190.110.86;39pkt 39fpkt", shape=invtriangle, color=brown];
stat1229[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.110.86:36675, *:*}[43.5897%]&lt;BR/&gt;{167.190.110.86:*, 32.13.55.82:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36675: (21.7949%)&lt;BR/&gt; 80: (21.7949%)&lt;BR/&gt; 48736: (2.5641%)&lt;BR/&gt; 64499: (1.28205%)&lt;BR/&gt; 62958: (1.28205%)&gt;];
}
10623--14465[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="167.190.110.86" src_port="36675"/>
      <filter dst_ip="32.13.55.82" dst_port="80" src_ip="167.190.110.86"/>
    </slice>
    <from sec="1284008423" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.130.217.86"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1231{
style=filled;
color=gray75;
10652[label="198.45.139.88;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14480[label="198.45.139.88;5pkt 5fpkt", shape=invtriangle, color=brown];
16778[label="198.45.139.88;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1231[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.139.88:1037, 34.1.164.31:1863}[20%]&lt;BR/&gt;{198.45.139.88:1067, 67.115.153.44:80}[20%]&lt;BR/&gt;{198.45.139.88:1042, 35.105.95.60:443}[20%]&lt;BR/&gt;{198.45.139.88:1038, 34.1.165.149:1863}[20%]&lt;BR/&gt;{198.45.139.88:1063, 35.104.178.202:443}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 443: (20%)&lt;BR/&gt; 1067: (10%)&lt;BR/&gt; 1063: (10%)&lt;BR/&gt; 1042: (10%)&gt;];
}
10652--14480[label="1;5pkt 5fpkt"];
10652--16778[label="1;5pkt 5fpkt"];
14480--16778[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="35.104.178.202" dst_port="443" src_ip="198.45.139.88" src_port="1063"/>
      <filter dst_ip="34.1.165.149" dst_port="1863" src_ip="198.45.139.88" src_port="1038"/>
      <filter dst_ip="35.105.95.60" dst_port="443" src_ip="198.45.139.88" src_port="1042"/>
      <filter dst_ip="67.115.153.44" dst_port="80" src_ip="198.45.139.88" src_port="1067"/>
      <filter dst_ip="34.1.164.31" dst_port="1863" src_ip="198.45.139.88" src_port="1037"/>
    </slice>
    <from sec="1284009092" usec="0"/>
    <to sec="1284009161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1232{
style=filled;
color=gray75;
10655[label="148.175.172.88;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14483[label="148.175.172.88;5pkt 5fpkt", shape=invtriangle, color=brown];
16781[label="148.175.172.88;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1232[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.175.172.88:53521, 40.35.162.32:993}[20%]&lt;BR/&gt;{148.175.172.88:53524, 40.35.162.32:993}[20%]&lt;BR/&gt;{148.175.172.88:56360, 198.54.236.157:110}[20%]&lt;BR/&gt;{148.175.172.88:56364, 198.54.236.157:110}[20%]&lt;BR/&gt;{148.175.172.88:56368, 198.54.236.157:110}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (30%)&lt;BR/&gt; 993: (20%)&lt;BR/&gt; 56368: (10%)&lt;BR/&gt; 56364: (10%)&lt;BR/&gt; 56360: (10%)&gt;];
}
10655--14483[label="1;5pkt 5fpkt"];
10655--16781[label="1;5pkt 5fpkt"];
14483--16781[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.54.236.157" dst_port="110" src_ip="148.175.172.88" src_port="56368"/>
      <filter dst_ip="198.54.236.157" dst_port="110" src_ip="148.175.172.88" src_port="56364"/>
      <filter dst_ip="198.54.236.157" dst_port="110" src_ip="148.175.172.88" src_port="56360"/>
      <filter dst_ip="40.35.162.32" dst_port="993" src_ip="148.175.172.88" src_port="53524"/>
      <filter dst_ip="40.35.162.32" dst_port="993" src_ip="148.175.172.88" src_port="53521"/>
    </slice>
    <from sec="1284008646" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.91.65.89"/>
    </slice>
    <from sec="1284008982" usec="0"/>
    <to sec="1284008993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1234{
style=filled;
color=gray75;
2515[label="199.56.42.45;d;59pkt 59fpkt", shape=diamond, color=yellow];
2516[label="211.235.45.241;s;8pkt 8fpkt", shape=diamond, color=yellow];
7521[label="199.56.42.45;d;59pkt 59fpkt", shape=hexagon, color=black];
10679[label="19.44.249.89;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13082[label="211.235.45.226;26pkt 26fpkt", shape=pentagon, color=darkviolet];
13301[label="211.235.45.241;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14499[label="19.44.249.89;4pkt 4fpkt", shape=invtriangle, color=brown];
15901[label="211.235.45.226;26pkt 26fpkt", shape=invtriangle, color=brown];
16019[label="211.235.45.241;8pkt 8fpkt", shape=invtriangle, color=brown];
16789[label="19.44.249.89;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1234[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.235.45.226:80, 199.56.42.45:*}[44.0678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0291%)&lt;BR/&gt; 4043: (1.21359%)&lt;BR/&gt; 4042: (1.21359%)&lt;BR/&gt; 4038: (1.21359%)&lt;BR/&gt; 4037: (1.21359%)&gt;];
}
2515--2516[label="1;8pkt 8fpkt"];
2515--7521[label="1;59pkt 59fpkt"];
2515--10679[label="1;4pkt 4fpkt"];
2515--13082[label="1;26pkt 26fpkt"];
2515--13301[label="1;8pkt 8fpkt"];
2515--14499[label="1;4pkt 4fpkt"];
2515--15901[label="1;26pkt 26fpkt"];
2515--16019[label="1;8pkt 8fpkt"];
2515--16789[label="1;4pkt 4fpkt"];
2516--7521[label="1;8pkt 8fpkt"];
2516--13301[label="1;8pkt 8fpkt"];
2516--16019[label="1;8pkt 8fpkt"];
7521--10679[label="1;4pkt 4fpkt"];
7521--13082[label="1;26pkt 26fpkt"];
7521--13301[label="1;8pkt 8fpkt"];
7521--14499[label="1;4pkt 4fpkt"];
7521--15901[label="1;26pkt 26fpkt"];
7521--16019[label="1;8pkt 8fpkt"];
7521--16789[label="1;4pkt 4fpkt"];
10679--14499[label="1;4pkt 4fpkt"];
10679--16789[label="1;4pkt 4fpkt"];
13082--15901[label="1;26pkt 26fpkt"];
13301--16019[label="1;8pkt 8fpkt"];
14499--16789[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.42.45" src_ip="211.235.45.226" src_port="80"/>
    </slice>
    <from sec="1284008523" usec="0"/>
    <to sec="1284008565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1236{
style=filled;
color=gray75;
464[label="199.56.56.118;d;8797pkt 8797fpkt", shape=diamond, color=yellow];
3819[label="164.12.148.17;d;5200pkt 5200fpkt", shape=diamond, color=yellow];
5978[label="58.162.57.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
6628[label="199.56.56.118;d;6737pkt 6737fpkt", shape=hexagon, color=black];
9109[label="189.33.205.8;17pkt 17fpkt", shape=pentagon, color=darkviolet];
9368[label="52.52.33.21;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9426[label="187.76.54.24;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9657[label="28.133.194.36;26pkt 26fpkt", shape=pentagon, color=darkviolet];
9750[label="52.3.210.41;27pkt 27fpkt", shape=pentagon, color=darkviolet];
9781[label="32.57.75.43;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9799[label="38.78.76.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9874[label="196.70.103.48;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9951[label="169.15.50.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10330[label="196.188.183.72;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10409[label="199.108.142.76;11pkt 11fpkt", shape=pentagon, color=darkviolet];
10442[label="33.198.21.78;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10495[label="204.65.80.80;8pkt 8fpkt", shape=pentagon, color=darkviolet];
10689[label="58.19.212.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10856[label="170.71.111.99;11pkt 11fpkt", shape=pentagon, color=darkviolet];
11298[label="53.153.49.124;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11416[label="199.82.227.130;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11720[label="49.91.2.148;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11827[label="120.41.95.153;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11829[label="81.112.128.153;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12026[label="0.171.223.163;16pkt 16fpkt", shape=pentagon, color=darkviolet];
12142[label="66.39.163.169;22pkt 22fpkt", shape=pentagon, color=darkviolet];
12209[label="190.113.213.172;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12372[label="52.18.209.182;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12389[label="48.187.252.183;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12418[label="120.62.12.186;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13241[label="63.236.27.237;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13365[label="189.20.36.246;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13579[label="189.33.205.8;17pkt 17fpkt", shape=invtriangle, color=brown];
13901[label="28.133.194.36;26pkt 26fpkt", shape=invtriangle, color=brown];
13956[label="52.3.210.41;27pkt 27fpkt", shape=invtriangle, color=brown];
13976[label="32.57.75.43;9pkt 9fpkt", shape=invtriangle, color=brown];
13986[label="38.78.76.44;2pkt 2fpkt", shape=invtriangle, color=brown];
14027[label="196.70.103.48;8pkt 8fpkt", shape=invtriangle, color=brown];
14074[label="169.15.50.52;1pkt 1fpkt", shape=invtriangle, color=brown];
14288[label="196.188.183.72;10pkt 10fpkt", shape=invtriangle, color=brown];
14338[label="199.108.142.76;11pkt 11fpkt", shape=invtriangle, color=brown];
14506[label="58.19.212.90;2pkt 2fpkt", shape=invtriangle, color=brown];
15111[label="49.91.2.148;14pkt 14fpkt", shape=invtriangle, color=brown];
15181[label="81.112.128.153;20pkt 20fpkt", shape=invtriangle, color=brown];
15406[label="190.113.213.172;11pkt 11fpkt", shape=invtriangle, color=brown];
15512[label="48.187.252.183;12pkt 12fpkt", shape=invtriangle, color=brown];
15532[label="120.62.12.186;8pkt 8fpkt", shape=invtriangle, color=brown];
16054[label="189.20.36.246;15pkt 15fpkt", shape=invtriangle, color=brown];
16392[label="28.133.194.36;26pkt 26fpkt", shape=invhouse, color=bisque];
16444[label="32.57.75.43;9pkt 9fpkt", shape=invhouse, color=bisque];
16449[label="38.78.76.44;2pkt 2fpkt", shape=invhouse, color=bisque];
16479[label="196.70.103.48;8pkt 8fpkt", shape=invhouse, color=bisque];
16654[label="196.188.183.72;10pkt 10fpkt", shape=invhouse, color=bisque];
16792[label="58.19.212.90;2pkt 2fpkt", shape=invhouse, color=bisque];
17306[label="190.113.213.172;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1236[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.12.148.17:24658}[35.4345%]&lt;BR/&gt;{*:*, 199.56.56.118:6881}[34.5655%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (20.7841%)&lt;BR/&gt; 24658: (11.6685%)&lt;BR/&gt; 0: (2.48735%)&lt;BR/&gt; 6883: (2.3679%)&lt;BR/&gt; 6884: (1.05162%)&gt;];
}
464--3715[label="0.00769231;1pkt 1fpkt"];
464--6628[label="1;6737pkt 6737fpkt"];
464--9109[label="0.764706;13pkt 13fpkt"];
464--9220[label="0.00769231;1pkt 1fpkt"];
464--9368[label="0.866667;13pkt 13fpkt"];
464--9426[label="1;5pkt 5fpkt"];
464--9657[label="0.846154;22pkt 22fpkt"];
464--9750[label="0.851852;23pkt 23fpkt"];
464--9781[label="0.888889;8pkt 8fpkt"];
464--9799[label="1;2pkt 2fpkt"];
464--9874[label="0.875;7pkt 7fpkt"];
464--10330[label="0.8;8pkt 8fpkt"];
464--10409[label="1;11pkt 11fpkt"];
464--10442[label="0.9;9pkt 9fpkt"];
464--10495[label="0.875;7pkt 7fpkt"];
464--10689[label="0.5;1pkt 1fpkt"];
464--10856[label="0.909091;10pkt 10fpkt"];
464--11298[label="1;18pkt 18fpkt"];
464--11416[label="0.888889;8pkt 8fpkt"];
464--11720[label="0.928571;13pkt 13fpkt"];
464--11827[label="0.833333;15pkt 15fpkt"];
464--11829[label="0.85;17pkt 17fpkt"];
464--12026[label="0.9375;15pkt 15fpkt"];
464--12142[label="0.818182;18pkt 18fpkt"];
464--12209[label="0.818182;9pkt 9fpkt"];
464--12372[label="0.888889;8pkt 8fpkt"];
464--12389[label="0.833333;10pkt 10fpkt"];
464--12418[label="1;8pkt 8fpkt"];
464--13241[label="0.833333;15pkt 15fpkt"];
464--13365[label="0.933333;14pkt 14fpkt"];
464--13579[label="0.764706;13pkt 13fpkt"];
464--13901[label="0.846154;22pkt 22fpkt"];
464--13956[label="0.851852;23pkt 23fpkt"];
464--13976[label="0.888889;8pkt 8fpkt"];
464--13986[label="1;2pkt 2fpkt"];
464--14027[label="0.875;7pkt 7fpkt"];
464--14288[label="0.8;8pkt 8fpkt"];
464--14338[label="1;11pkt 11fpkt"];
464--14506[label="0.5;1pkt 1fpkt"];
464--15111[label="0.928571;13pkt 13fpkt"];
464--15181[label="0.85;17pkt 17fpkt"];
464--15406[label="0.818182;9pkt 9fpkt"];
464--15512[label="0.833333;10pkt 10fpkt"];
464--15532[label="1;8pkt 8fpkt"];
464--16054[label="0.933333;14pkt 14fpkt"];
464--16392[label="0.846154;22pkt 22fpkt"];
464--16444[label="0.888889;8pkt 8fpkt"];
464--16449[label="1;2pkt 2fpkt"];
464--16479[label="0.875;7pkt 7fpkt"];
464--16654[label="0.8;8pkt 8fpkt"];
464--16792[label="0.5;1pkt 1fpkt"];
464--17306[label="0.818182;9pkt 9fpkt"];
3819--5978[label="1;1pkt 1fpkt"];
3819--9951[label="1;1pkt 1fpkt"];
3819--10689[label="0.5;1pkt 1fpkt"];
3819--10838[label="0.00327869;1pkt 1fpkt"];
3819--10946[label="0.0192308;1pkt 1fpkt"];
3819--14074[label="1;1pkt 1fpkt"];
3819--14506[label="0.5;1pkt 1fpkt"];
3819--14590[label="0.00327869;1pkt 1fpkt"];
3819--16792[label="0.5;1pkt 1fpkt"];
3819--16842[label="0.00327869;1pkt 1fpkt"];
6628--9109[label="0.411765;7pkt 7fpkt"];
6628--9220[label="0.00769231;1pkt 1fpkt"];
6628--9368[label="0.666667;10pkt 10fpkt"];
6628--9426[label="1;5pkt 5fpkt"];
6628--9657[label="0.576923;15pkt 15fpkt"];
6628--9750[label="0.592593;16pkt 16fpkt"];
6628--9781[label="0.666667;6pkt 6fpkt"];
6628--9799[label="1;2pkt 2fpkt"];
6628--9874[label="0.5;4pkt 4fpkt"];
6628--10330[label="0.7;7pkt 7fpkt"];
6628--10409[label="0.727273;8pkt 8fpkt"];
6628--10442[label="0.6;6pkt 6fpkt"];
6628--10495[label="0.625;5pkt 5fpkt"];
6628--10689[label="0.5;1pkt 1fpkt"];
6628--10856[label="0.909091;10pkt 10fpkt"];
6628--11298[label="0.944444;17pkt 17fpkt"];
6628--11416[label="0.888889;8pkt 8fpkt"];
6628--11720[label="0.642857;9pkt 9fpkt"];
6628--11827[label="0.611111;11pkt 11fpkt"];
6628--11829[label="0.55;11pkt 11fpkt"];
6628--12026[label="0.625;10pkt 10fpkt"];
6628--12142[label="0.590909;13pkt 13fpkt"];
6628--12209[label="0.636364;7pkt 7fpkt"];
6628--12372[label="0.555556;5pkt 5fpkt"];
6628--12389[label="0.833333;10pkt 10fpkt"];
6628--12418[label="0.875;7pkt 7fpkt"];
6628--13241[label="0.555556;10pkt 10fpkt"];
6628--13365[label="0.6;9pkt 9fpkt"];
6628--13579[label="0.411765;7pkt 7fpkt"];
6628--13901[label="0.576923;15pkt 15fpkt"];
6628--13956[label="0.592593;16pkt 16fpkt"];
6628--13976[label="0.666667;6pkt 6fpkt"];
6628--13986[label="1;2pkt 2fpkt"];
6628--14027[label="0.5;4pkt 4fpkt"];
6628--14288[label="0.7;7pkt 7fpkt"];
6628--14338[label="0.727273;8pkt 8fpkt"];
6628--14506[label="0.5;1pkt 1fpkt"];
6628--15111[label="0.642857;9pkt 9fpkt"];
6628--15181[label="0.55;11pkt 11fpkt"];
6628--15406[label="0.636364;7pkt 7fpkt"];
6628--15512[label="0.833333;10pkt 10fpkt"];
6628--15532[label="0.875;7pkt 7fpkt"];
6628--16054[label="0.6;9pkt 9fpkt"];
6628--16392[label="0.576923;15pkt 15fpkt"];
6628--16444[label="0.666667;6pkt 6fpkt"];
6628--16449[label="1;2pkt 2fpkt"];
6628--16479[label="0.5;4pkt 4fpkt"];
6628--16654[label="0.7;7pkt 7fpkt"];
6628--16792[label="0.5;1pkt 1fpkt"];
6628--17306[label="0.636364;7pkt 7fpkt"];
9109--13579[label="1;17pkt 17fpkt"];
9657--13901[label="1;26pkt 26fpkt"];
9657--16392[label="1;26pkt 26fpkt"];
9750--13956[label="1;27pkt 27fpkt"];
9781--13976[label="1;9pkt 9fpkt"];
9781--16444[label="1;9pkt 9fpkt"];
9799--13986[label="1;2pkt 2fpkt"];
9799--16449[label="1;2pkt 2fpkt"];
9874--14027[label="1;8pkt 8fpkt"];
9874--16479[label="1;8pkt 8fpkt"];
9951--14074[label="1;1pkt 1fpkt"];
10330--14288[label="1;10pkt 10fpkt"];
10330--16654[label="1;10pkt 10fpkt"];
10409--14338[label="1;11pkt 11fpkt"];
10689--14506[label="1;2pkt 2fpkt"];
10689--16792[label="1;2pkt 2fpkt"];
11720--15111[label="1;14pkt 14fpkt"];
11829--15181[label="1;20pkt 20fpkt"];
12209--15406[label="1;11pkt 11fpkt"];
12209--17306[label="1;11pkt 11fpkt"];
12389--15512[label="1;12pkt 12fpkt"];
12418--15532[label="1;8pkt 8fpkt"];
13365--16054[label="1;15pkt 15fpkt"];
13901--16392[label="1;26pkt 26fpkt"];
13976--16444[label="1;9pkt 9fpkt"];
13986--16449[label="1;2pkt 2fpkt"];
14027--16479[label="1;8pkt 8fpkt"];
14288--16654[label="1;10pkt 10fpkt"];
14506--16792[label="1;2pkt 2fpkt"];
15406--17306[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.118" dst_port="6881"/>
      <filter dst_ip="164.12.148.17" dst_port="24658"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1237{
style=filled;
color=gray75;
5217[label="145.105.226.40;d;30pkt 30fpkt", shape=diamond, color=yellow];
10627[label="65.78.179.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10692[label="16.42.229.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11851[label="27.212.18.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12449[label="29.147.138.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14467[label="65.78.179.86;1pkt 1fpkt", shape=invtriangle, color=brown];
14507[label="16.42.229.90;1pkt 1fpkt", shape=invtriangle, color=brown];
16768[label="65.78.179.86;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1237[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.105.226.40:*}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5946%)&lt;BR/&gt; 60530: (5.40541%)&lt;BR/&gt; 62034: (4.05405%)&lt;BR/&gt; 8080: (4.05405%)&lt;BR/&gt; 61367: (2.7027%)&gt;];
}
5217--8589[label="0.0333333;1pkt 1fpkt"];
5217--8872[label="0.0333333;1pkt 1fpkt"];
5217--9515[label="0.0333333;1pkt 1fpkt"];
5217--10627[label="1;1pkt 1fpkt"];
5217--10692[label="1;1pkt 1fpkt"];
5217--11851[label="1;1pkt 1fpkt"];
5217--12449[label="1;1pkt 1fpkt"];
5217--13815[label="0.0333333;1pkt 1fpkt"];
5217--14467[label="1;1pkt 1fpkt"];
5217--14507[label="1;1pkt 1fpkt"];
5217--16344[label="0.0333333;1pkt 1fpkt"];
5217--16768[label="1;1pkt 1fpkt"];
10627--14467[label="1;1pkt 1fpkt"];
10627--16768[label="1;1pkt 1fpkt"];
10692--14507[label="1;1pkt 1fpkt"];
14467--16768[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.226.40" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
10708[label="25.104.13.92;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14517[label="25.104.13.92;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.104.13.92:*, 167.190.180.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1104: (8.33333%)&lt;BR/&gt; 1103: (8.33333%)&lt;BR/&gt; 1100: (8.33333%)&lt;BR/&gt; 1098: (8.33333%)&gt;];
}
10708--14517[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="25.104.13.92"/>
    </slice>
    <from sec="1284009253" usec="0"/>
    <to sec="1284009257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1239{
style=filled;
color=gray75;
10716[label="199.38.135.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14522[label="199.38.135.92;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1239[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.38.135.92:36005, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36005: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10716--14522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="199.38.135.92" src_port="36005"/>
    </slice>
    <from sec="1284008616" usec="0"/>
    <to sec="1284009241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1240{
style=filled;
color=gray75;
10725[label="28.74.34.93;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14526[label="28.74.34.93;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1240[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.74.34.93:32859, 199.56.52.98:80}[33.3333%]&lt;BR/&gt;{28.74.34.93:32899, 199.56.52.98:80}[33.3333%]&lt;BR/&gt;{28.74.34.93:32910, 199.56.52.98:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32910: (16.6667%)&lt;BR/&gt; 32899: (16.6667%)&lt;BR/&gt; 32859: (16.6667%)&gt;];
}
10725--14526[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.98" dst_port="80" src_ip="28.74.34.93" src_port="32910"/>
      <filter dst_ip="199.56.52.98" dst_port="80" src_ip="28.74.34.93" src_port="32899"/>
      <filter dst_ip="199.56.52.98" dst_port="80" src_ip="28.74.34.93" src_port="32859"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.35.166.93"/>
    </slice>
    <from sec="1284008420" usec="0"/>
    <to sec="1284008901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.144.177.93"/>
    </slice>
    <from sec="1284009048" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1243{
style=filled;
color=gray75;
10740[label="195.42.231.93;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14535[label="195.42.231.93;5pkt 5fpkt", shape=invtriangle, color=brown];
16807[label="195.42.231.93;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1243[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.42.231.93:110, 199.56.42.79:50082}[20%]&lt;BR/&gt;{195.42.231.93:995, 164.12.157.181:49800}[20%]&lt;BR/&gt;{195.42.231.93:995, 164.12.157.181:49802}[20%]&lt;BR/&gt;{195.42.231.93:995, 164.12.157.181:49805}[20%]&lt;BR/&gt;{195.42.231.93:995, 164.12.157.181:49809}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (40%)&lt;BR/&gt; 50082: (10%)&lt;BR/&gt; 49809: (10%)&lt;BR/&gt; 49805: (10%)&lt;BR/&gt; 49802: (10%)&gt;];
}
10740--14535[label="1;5pkt 5fpkt"];
10740--16807[label="1;5pkt 5fpkt"];
14535--16807[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="164.12.157.181" dst_port="49809" src_ip="195.42.231.93" src_port="995"/>
      <filter dst_ip="164.12.157.181" dst_port="49805" src_ip="195.42.231.93" src_port="995"/>
      <filter dst_ip="164.12.157.181" dst_port="49802" src_ip="195.42.231.93" src_port="995"/>
      <filter dst_ip="164.12.157.181" dst_port="49800" src_ip="195.42.231.93" src_port="995"/>
      <filter dst_ip="199.56.42.79" dst_port="50082" src_ip="195.42.231.93" src_port="110"/>
    </slice>
    <from sec="1284009021" usec="0"/>
    <to sec="1284009205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1244{
style=filled;
color=gray75;
10776[label="46.78.209.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14552[label="46.78.209.95;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1244[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.78.209.95:1430, 199.56.52.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1430: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10776--14552[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.99" dst_port="80" src_ip="46.78.209.95" src_port="1430"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.112.112.96"/>
    </slice>
    <from sec="1284009040" usec="0"/>
    <to sec="1284009082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1246{
style=filled;
color=gray75;
10797[label="146.161.183.96;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14562[label="146.161.183.96;5pkt 5fpkt", shape=invtriangle, color=brown];
16823[label="146.161.183.96;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1246[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.161.183.96:80, 145.105.89.121:4660}[20%]&lt;BR/&gt;{146.161.183.96:80, 145.105.89.121:4661}[20%]&lt;BR/&gt;{146.161.183.96:80, 145.105.89.121:4668}[20%]&lt;BR/&gt;{146.161.183.96:80, 145.105.89.121:4669}[20%]&lt;BR/&gt;{146.161.183.96:80, 145.105.89.121:4670}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4670: (10%)&lt;BR/&gt; 4669: (10%)&lt;BR/&gt; 4668: (10%)&lt;BR/&gt; 4661: (10%)&gt;];
}
10797--14562[label="1;5pkt 5fpkt"];
10797--16823[label="1;5pkt 5fpkt"];
14562--16823[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.89.121" dst_port="4670" src_ip="146.161.183.96" src_port="80"/>
      <filter dst_ip="145.105.89.121" dst_port="4669" src_ip="146.161.183.96" src_port="80"/>
      <filter dst_ip="145.105.89.121" dst_port="4668" src_ip="146.161.183.96" src_port="80"/>
      <filter dst_ip="145.105.89.121" dst_port="4661" src_ip="146.161.183.96" src_port="80"/>
      <filter dst_ip="145.105.89.121" dst_port="4660" src_ip="146.161.183.96" src_port="80"/>
    </slice>
    <from sec="1284009290" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.196.0.97"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.166.161.97"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284009079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1251{
style=filled;
color=gray75;
10826[label="148.52.250.97;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14582[label="148.52.250.97;9pkt 9fpkt", shape=invtriangle, color=brown];
16836[label="148.52.250.97;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1251[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.250.97:80, 33.73.181.162:*}[55.5556%]&lt;BR/&gt;{148.52.250.97:443, 33.73.181.130:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 443: (22.2222%)&lt;BR/&gt; 64021: (5.55556%)&lt;BR/&gt; 61912: (5.55556%)&lt;BR/&gt; 58453: (5.55556%)&gt;];
}
10826--14582[label="1;9pkt 9fpkt"];
10826--16836[label="1;9pkt 9fpkt"];
14582--16836[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.181.162" src_ip="148.52.250.97" src_port="80"/>
      <filter dst_ip="33.73.181.130" src_ip="148.52.250.97" src_port="443"/>
    </slice>
    <from sec="1284008953" usec="0"/>
    <to sec="1284009268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1252{
style=filled;
color=gray75;
10828[label="26.28.4.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14583[label="26.28.4.98;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1252[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.28.4.98:1036, 137.89.103.82:19473}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19473: (50%)&lt;BR/&gt; 1036: (50%)&gt;];
}
10828--14583[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.89.103.82" dst_port="19473" src_ip="26.28.4.98" src_port="1036"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1253{
style=filled;
color=gray75;
2676[label="167.190.82.141;d;14pkt 14fpkt", shape=diamond, color=yellow];
4146[label="209.160.67.98;s;5pkt 5fpkt", shape=diamond, color=yellow];
10837[label="209.160.67.98;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14589[label="209.160.67.98;5pkt 5fpkt", shape=invtriangle, color=brown];
16841[label="209.160.67.98;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1253[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.160.67.98:*, 167.190.82.141:80}[29.4118%]&lt;BR/&gt;{33.73.177.185:*, 167.190.82.141:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64021: (7.35294%)&lt;BR/&gt; 57254: (7.35294%)&lt;BR/&gt; 59380: (5.88235%)&lt;BR/&gt; 47749: (5.88235%)&gt;];
}
2676--3930[label="0.0714286;1pkt 1fpkt"];
2676--4146[label="0.6;3pkt 3fpkt"];
2676--8884[label="0.0714286;1pkt 1fpkt"];
2676--8894[label="0.142857;2pkt 2fpkt"];
2676--10837[label="0.4;2pkt 2fpkt"];
2676--14589[label="0.4;2pkt 2fpkt"];
2676--16841[label="0.4;2pkt 2fpkt"];
4146--10837[label="0.8;4pkt 4fpkt"];
4146--14589[label="0.8;4pkt 4fpkt"];
4146--16841[label="0.8;4pkt 4fpkt"];
10837--14589[label="1;5pkt 5fpkt"];
10837--16841[label="1;5pkt 5fpkt"];
14589--16841[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.82.141" dst_port="80" src_ip="209.160.67.98"/>
      <filter dst_ip="167.190.82.141" dst_port="80" src_ip="33.73.177.185"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1254{
style=filled;
color=gray75;
1204[label="145.105.116.146;d;199pkt 199fpkt", shape=diamond, color=yellow];
1545[label="28.13.59.136;s;71pkt 71fpkt", shape=diamond, color=yellow];
1787[label="145.105.69.127;d;171pkt 171fpkt", shape=diamond, color=yellow];
1935[label="28.13.58.136;s;106pkt 106fpkt", shape=diamond, color=yellow];
2168[label="148.36.212.0;d;31pkt 31fpkt", shape=diamond, color=yellow];
2262[label="218.82.162.108;s;34pkt 34fpkt", shape=diamond, color=yellow];
2488[label="25.34.148.31;s;7pkt 7fpkt", shape=diamond, color=yellow];
3182[label="194.41.80.54;s;77pkt 77fpkt", shape=diamond, color=yellow];
3356[label="148.36.100.55;d;120pkt 120fpkt", shape=diamond, color=yellow];
6990[label="28.13.58.136;s;83pkt 83fpkt", shape=hexagon, color=black];
7157[label="25.34.148.31;s;7pkt 7fpkt", shape=hexagon, color=black];
7870[label="145.105.116.146;d;199pkt 199fpkt", shape=hexagon, color=black];
8311[label="148.36.100.55;d;104pkt 104fpkt", shape=hexagon, color=black];
8326[label="145.105.69.127;d;167pkt 167fpkt", shape=hexagon, color=black];
9551[label="25.34.148.31;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9737[label="223.88.81.41;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9977[label="194.41.80.54;77pkt 77fpkt", shape=pentagon, color=darkviolet];
10226[label="199.168.184.67;34pkt 34fpkt", shape=pentagon, color=darkviolet];
11062[label="25.3.77.110;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11509[label="28.13.59.136;92pkt 92fpkt", shape=pentagon, color=darkviolet];
11668[label="18.197.57.145;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11674[label="8.60.155.145;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12147[label="216.34.204.169;28pkt 28fpkt", shape=pentagon, color=darkviolet];
13836[label="25.34.148.31;6pkt 6fpkt", shape=invtriangle, color=brown];
13948[label="223.88.81.41;7pkt 7fpkt", shape=invtriangle, color=brown];
16356[label="25.34.148.31;7pkt 7fpkt", shape=invhouse, color=bisque];
16428[label="223.88.81.41;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1254[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.105.116.146:*}[27.6685%]&lt;BR/&gt;{*:80, 145.105.69.127:*}[22.3315%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8995%)&lt;BR/&gt; 443: (0.743605%)&lt;BR/&gt; 49215: (0.178465%)&lt;BR/&gt; 1245: (0.178465%)&lt;BR/&gt; 1241: (0.178465%)&gt;];
}
1204--2262[label="0.970588;33pkt 33fpkt"];
1204--5112[label="0.00502513;1pkt 1fpkt"];
1204--7870[label="1;199pkt 199fpkt"];
1204--8589[label="0.00502513;1pkt 1fpkt"];
1204--8872[label="0.00502513;1pkt 1fpkt"];
1204--9515[label="0.00502513;1pkt 1fpkt"];
1204--11668[label="0.333333;6pkt 6fpkt"];
1204--12147[label="1;28pkt 28fpkt"];
1204--13815[label="0.00502513;1pkt 1fpkt"];
1204--16344[label="0.00502513;1pkt 1fpkt"];
1545--2246[label="0.0704225;5pkt 5fpkt"];
1545--3091[label="0.112676;8pkt 8fpkt"];
1545--3356[label="0.323944;23pkt 23fpkt"];
1545--3849[label="0.0454545;1pkt 1fpkt"];
1545--4628[label="0.0140845;1pkt 1fpkt"];
1545--5192[label="0.0172414;1pkt 1fpkt"];
1545--5219[label="0.0985915;7pkt 7fpkt"];
1545--7480[label="0.112676;8pkt 8fpkt"];
1545--8075[label="0.0140845;1pkt 1fpkt"];
1545--8311[label="0.323944;23pkt 23fpkt"];
1545--11509[label="1;71pkt 71fpkt"];
1787--1935[label="0.188679;20pkt 20fpkt"];
1787--2963[label="0.00584795;1pkt 1fpkt"];
1787--2970[label="0.00892857;1pkt 1fpkt"];
1787--3182[label="1;77pkt 77fpkt"];
1787--4193[label="0.0192308;1pkt 1fpkt"];
1787--4831[label="0.00813008;1pkt 1fpkt"];
1787--5112[label="0.00584795;1pkt 1fpkt"];
1787--5753[label="0.00584795;1pkt 1fpkt"];
1787--6990[label="0.240964;20pkt 20fpkt"];
1787--8326[label="1;167pkt 167fpkt"];
1787--8589[label="0.00584795;1pkt 1fpkt"];
1787--8872[label="0.00584795;1pkt 1fpkt"];
1787--9515[label="0.00584795;1pkt 1fpkt"];
1787--9977[label="1;77pkt 77fpkt"];
1787--10225[label="0.00584795;1pkt 1fpkt"];
1787--11441[label="0.0526316;1pkt 1fpkt"];
1787--11674[label="1;8pkt 8fpkt"];
1787--13091[label="0.0350877;6pkt 6fpkt"];
1787--13815[label="0.00584795;1pkt 1fpkt"];
1787--14225[label="0.00584795;1pkt 1fpkt"];
1787--15904[label="0.0350877;6pkt 6fpkt"];
1787--16344[label="0.00584795;1pkt 1fpkt"];
1787--17595[label="0.0350877;6pkt 6fpkt"];
1935--2213[label="0.0566038;6pkt 6fpkt"];
1935--2246[label="0.0283019;3pkt 3fpkt"];
1935--3356[label="0.0283019;3pkt 3fpkt"];
1935--3917[label="0.0188679;2pkt 2fpkt"];
1935--3925[label="0.0222222;1pkt 1fpkt"];
1935--6990[label="1;83pkt 83fpkt"];
1935--8189[label="0.0566038;6pkt 6fpkt"];
1935--8311[label="0.0288462;3pkt 3fpkt"];
1935--8326[label="0.188679;20pkt 20fpkt"];
2168--2488[label="1;7pkt 7fpkt"];
2168--7157[label="1;7pkt 7fpkt"];
2168--9551[label="1;7pkt 7fpkt"];
2168--11668[label="0.333333;6pkt 6fpkt"];
2168--13836[label="1;6pkt 6fpkt"];
2168--16356[label="1;7pkt 7fpkt"];
2262--6622[label="0.0294118;1pkt 1fpkt"];
2262--7870[label="0.970588;33pkt 33fpkt"];
2488--7157[label="1;7pkt 7fpkt"];
2488--9551[label="1;7pkt 7fpkt"];
2488--13836[label="1;6pkt 6fpkt"];
2488--16356[label="1;7pkt 7fpkt"];
3182--8326[label="1;77pkt 77fpkt"];
3182--9977[label="1;77pkt 77fpkt"];
3356--3376[label="0.00833333;1pkt 1fpkt"];
3356--3976[label="0.0865385;9pkt 9fpkt"];
3356--4195[label="0.0135135;1pkt 1fpkt"];
3356--4272[label="0.00833333;1pkt 1fpkt"];
3356--4498[label="0.0769231;1pkt 1fpkt"];
3356--4831[label="0.05;6pkt 6fpkt"];
3356--4846[label="0.0135135;1pkt 1fpkt"];
3356--5112[label="0.00833333;1pkt 1fpkt"];
3356--5812[label="0.0238095;1pkt 1fpkt"];
3356--6990[label="0.0361446;3pkt 3fpkt"];
3356--8311[label="1;104pkt 104fpkt"];
3356--8589[label="0.00833333;1pkt 1fpkt"];
3356--8872[label="0.00833333;1pkt 1fpkt"];
3356--9269[label="0.00833333;1pkt 1fpkt"];
3356--9453[label="0.0125;1pkt 1fpkt"];
3356--9470[label="0.0172414;1pkt 1fpkt"];
3356--9515[label="0.00833333;1pkt 1fpkt"];
3356--9704[label="0.00833333;1pkt 1fpkt"];
3356--9737[label="0.142857;1pkt 1fpkt"];
3356--10226[label="0.0588235;2pkt 2fpkt"];
3356--11062[label="1;7pkt 7fpkt"];
3356--11177[label="0.0487805;2pkt 2fpkt"];
3356--11509[label="0.25;23pkt 23fpkt"];
3356--11668[label="0.333333;6pkt 6fpkt"];
3356--12020[label="0.00862069;1pkt 1fpkt"];
3356--13668[label="0.00833333;1pkt 1fpkt"];
3356--13815[label="0.00833333;1pkt 1fpkt"];
3356--13931[label="0.00833333;1pkt 1fpkt"];
3356--13948[label="0.142857;1pkt 1fpkt"];
3356--15296[label="0.00862069;1pkt 1fpkt"];
3356--16254[label="0.00833333;1pkt 1fpkt"];
3356--16344[label="0.00833333;1pkt 1fpkt"];
3356--16413[label="0.00833333;1pkt 1fpkt"];
3356--16428[label="0.142857;1pkt 1fpkt"];
3356--17247[label="0.00862069;1pkt 1fpkt"];
6990--8189[label="0.0722892;6pkt 6fpkt"];
6990--8311[label="0.0361446;3pkt 3fpkt"];
6990--8326[label="0.240964;20pkt 20fpkt"];
7157--9551[label="1;7pkt 7fpkt"];
7157--13836[label="1;6pkt 6fpkt"];
7157--16356[label="1;7pkt 7fpkt"];
7870--8589[label="0.00502513;1pkt 1fpkt"];
7870--8872[label="0.00502513;1pkt 1fpkt"];
7870--9515[label="0.00502513;1pkt 1fpkt"];
7870--11668[label="0.333333;6pkt 6fpkt"];
7870--12147[label="1;28pkt 28fpkt"];
7870--13815[label="0.00502513;1pkt 1fpkt"];
7870--16344[label="0.00502513;1pkt 1fpkt"];
8311--9704[label="0.00961538;1pkt 1fpkt"];
8311--9737[label="0.142857;1pkt 1fpkt"];
8311--11062[label="1;7pkt 7fpkt"];
8311--11509[label="0.25;23pkt 23fpkt"];
8311--11668[label="0.333333;6pkt 6fpkt"];
8311--12020[label="0.00961538;1pkt 1fpkt"];
8311--13931[label="0.00961538;1pkt 1fpkt"];
8311--13948[label="0.142857;1pkt 1fpkt"];
8311--15296[label="0.00961538;1pkt 1fpkt"];
8311--16413[label="0.00961538;1pkt 1fpkt"];
8311--16428[label="0.142857;1pkt 1fpkt"];
8311--17247[label="0.00961538;1pkt 1fpkt"];
8326--8589[label="0.00598802;1pkt 1fpkt"];
8326--8872[label="0.00598802;1pkt 1fpkt"];
8326--9515[label="0.00598802;1pkt 1fpkt"];
8326--9977[label="1;77pkt 77fpkt"];
8326--10225[label="0.00598802;1pkt 1fpkt"];
8326--11441[label="0.0526316;1pkt 1fpkt"];
8326--11674[label="1;8pkt 8fpkt"];
8326--13091[label="0.0359281;6pkt 6fpkt"];
8326--13815[label="0.00598802;1pkt 1fpkt"];
8326--14225[label="0.00598802;1pkt 1fpkt"];
8326--15904[label="0.0359281;6pkt 6fpkt"];
8326--16344[label="0.00598802;1pkt 1fpkt"];
8326--17595[label="0.0359281;6pkt 6fpkt"];
9551--13836[label="1;6pkt 6fpkt"];
9551--16356[label="1;7pkt 7fpkt"];
9737--13948[label="1;7pkt 7fpkt"];
9737--16428[label="1;7pkt 7fpkt"];
13836--16356[label="1;6pkt 6fpkt"];
13948--16428[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.116.146" src_port="80"/>
      <filter dst_ip="145.105.69.127" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1255{
style=filled;
color=gray75;
10842[label="198.45.128.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14593[label="198.45.128.98;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1255[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.128.98:7764, 66.4.49.177:80}[33.3333%]&lt;BR/&gt;{198.45.128.98:7765, 66.4.49.177:80}[33.3333%]&lt;BR/&gt;{198.45.128.98:7766, 66.4.49.177:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7766: (16.6667%)&lt;BR/&gt; 7765: (16.6667%)&lt;BR/&gt; 7764: (16.6667%)&gt;];
}
10842--14593[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="66.4.49.177" dst_port="80" src_ip="198.45.128.98" src_port="7766"/>
      <filter dst_ip="66.4.49.177" dst_port="80" src_ip="198.45.128.98" src_port="7765"/>
      <filter dst_ip="66.4.49.177" dst_port="80" src_ip="198.45.128.98" src_port="7764"/>
    </slice>
    <from sec="1284008416" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.16.230.98"/>
    </slice>
    <from sec="1284008414" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.103.15.99"/>
    </slice>
    <from sec="1284008433" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1258{
style=filled;
color=gray75;
10860[label="180.11.124.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14607[label="180.11.124.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1258[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.11.124.99:5041, 145.105.68.59:5041}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (100%)&gt;];
}
10860--14607[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.68.59" dst_port="5041" src_ip="180.11.124.99" src_port="5041"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.140.178.100"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.47.12.101"/>
    </slice>
    <from sec="1284008941" usec="0"/>
    <to sec="1284008985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.35.17.101"/>
    </slice>
    <from sec="1284009073" usec="0"/>
    <to sec="1284009109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1262{
style=filled;
color=gray75;
10904[label="209.160.3.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14632[label="209.160.3.102;1pkt 1fpkt", shape=invtriangle, color=brown];
16864[label="209.160.3.102;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1262[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.160.3.102:49601, 199.56.57.65:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49601: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
10904--14632[label="1;1pkt 1fpkt"];
10904--16864[label="1;1pkt 1fpkt"];
14632--16864[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.57.65" dst_port="995" src_ip="209.160.3.102" src_port="49601"/>
    </slice>
    <from sec="1284009205" usec="0"/>
    <to sec="1284009210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1263{
style=filled;
color=gray75;
10916[label="29.170.242.102;21pkt 21fpkt", shape=pentagon, color=darkviolet];
14640[label="29.170.242.102;21pkt 21fpkt", shape=invtriangle, color=brown];
stat1263[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.170.242.102:*, 199.56.56.145:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24263: (2.38095%)&lt;BR/&gt; 24262: (2.38095%)&lt;BR/&gt; 24216: (2.38095%)&lt;BR/&gt; 24215: (2.38095%)&gt;];
}
10916--14640[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.145" dst_port="80" src_ip="29.170.242.102"/>
    </slice>
    <from sec="1284009130" usec="0"/>
    <to sec="1284009155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1265{
style=filled;
color=gray75;
10923[label="145.105.73.103;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14646[label="145.105.73.103;10pkt 10fpkt", shape=invtriangle, color=brown];
16874[label="145.105.73.103;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1265[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.73.103:*, 44.128.21.72:80}[50%]&lt;BR/&gt;{145.105.73.103:*, 222.142.216.174:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2210: (5%)&lt;BR/&gt; 2208: (5%)&lt;BR/&gt; 2206: (5%)&lt;BR/&gt; 2204: (5%)&gt;];
}
10923--14646[label="1;10pkt 10fpkt"];
10923--16874[label="1;10pkt 10fpkt"];
14646--16874[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="222.142.216.174" dst_port="80" src_ip="145.105.73.103"/>
      <filter dst_ip="44.128.21.72" dst_port="80" src_ip="145.105.73.103"/>
    </slice>
    <from sec="1284009280" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1266{
style=filled;
color=gray75;
10928[label="69.5.138.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14649[label="69.5.138.103;1pkt 1fpkt", shape=invtriangle, color=brown];
16875[label="69.5.138.103;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1266[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.5.138.103:51796, 148.36.49.1:22550}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51796: (50%)&lt;BR/&gt; 22550: (50%)&gt;];
}
10928--14649[label="1;1pkt 1fpkt"];
10928--16875[label="1;1pkt 1fpkt"];
14649--16875[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.49.1" dst_port="22550" src_ip="69.5.138.103" src_port="51796"/>
    </slice>
    <from sec="1284008982" usec="0"/>
    <to sec="1284009289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.162.140.103"/>
    </slice>
    <from sec="1284009108" usec="0"/>
    <to sec="1284009121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1268{
style=filled;
color=gray75;
10933[label="208.32.206.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14652[label="208.32.206.103;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1268[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.32.206.103:80, 198.45.59.97:47888}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47888: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10933--14652[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.59.97" dst_port="47888" src_ip="208.32.206.103" src_port="80"/>
    </slice>
    <from sec="1284009235" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1269{
style=filled;
color=gray75;
10934[label="29.108.225.103;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14653[label="29.108.225.103;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1269[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.108.225.103:61913, 167.190.180.100:80}[20%]&lt;BR/&gt;{29.108.225.103:62448, 167.190.180.100:80}[20%]&lt;BR/&gt;{29.108.225.103:60217, 167.190.180.98:80}[20%]&lt;BR/&gt;{29.108.225.103:61415, 167.190.180.98:80}[20%]&lt;BR/&gt;{29.108.225.103:61506, 167.190.180.98:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62448: (10%)&lt;BR/&gt; 61913: (10%)&lt;BR/&gt; 61506: (10%)&lt;BR/&gt; 61415: (10%)&gt;];
}
10934--14653[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="29.108.225.103" src_port="61506"/>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="29.108.225.103" src_port="61415"/>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="29.108.225.103" src_port="60217"/>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="29.108.225.103" src_port="62448"/>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="29.108.225.103" src_port="61913"/>
    </slice>
    <from sec="1284009296" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="176.4.33.104"/>
    </slice>
    <from sec="1284009217" usec="0"/>
    <to sec="1284009230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1271{
style=filled;
color=gray75;
10944[label="148.142.72.104;20pkt 20fpkt", shape=pentagon, color=darkviolet];
14661[label="148.142.72.104;20pkt 20fpkt", shape=invtriangle, color=brown];
16882[label="148.142.72.104;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1271[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.142.72.104:*, 38.146.2.97:80}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56780: (2.5%)&lt;BR/&gt; 55092: (2.5%)&lt;BR/&gt; 55091: (2.5%)&lt;BR/&gt; 55090: (2.5%)&gt;];
}
10944--14661[label="1;20pkt 20fpkt"];
10944--16882[label="1;20pkt 20fpkt"];
14661--16882[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="38.146.2.97" dst_port="80" src_ip="148.142.72.104"/>
    </slice>
    <from sec="1284008447" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1272{
style=filled;
color=gray75;
10945[label="221.167.74.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14662[label="221.167.74.104;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1272[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.167.74.104:1560, 199.56.52.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1560: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10945--14662[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.99" dst_port="80" src_ip="221.167.74.104" src_port="1560"/>
    </slice>
    <from sec="1284008610" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.222.97.104"/>
    </slice>
    <from sec="1284008500" usec="0"/>
    <to sec="1284008512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1274{
style=filled;
color=gray75;
10952[label="148.36.156.104;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14665[label="148.36.156.104;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1274[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.156.104:*, 193.177.135.128:80}[46.1538%]&lt;BR/&gt;{148.36.156.104:80, *:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60729: (3.84615%)&lt;BR/&gt; 60170: (3.84615%)&lt;BR/&gt; 59878: (3.84615%)&lt;BR/&gt; 59704: (3.84615%)&gt;];
}
10952--14665[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="148.36.156.104" src_port="80"/>
      <filter dst_ip="193.177.135.128" dst_port="80" src_ip="148.36.156.104"/>
    </slice>
    <from sec="1284008497" usec="0"/>
    <to sec="1284008753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1275{
style=filled;
color=gray75;
10957[label="27.171.0.105;18pkt 18fpkt", shape=pentagon, color=darkviolet];
14667[label="27.171.0.105;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1275[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.171.0.105:80, 148.175.185.68:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4819: (2.77778%)&lt;BR/&gt; 4803: (2.77778%)&lt;BR/&gt; 4801: (2.77778%)&lt;BR/&gt; 4798: (2.77778%)&gt;];
}
10957--14667[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="148.175.185.68" src_ip="27.171.0.105" src_port="80"/>
    </slice>
    <from sec="1284008674" usec="0"/>
    <to sec="1284009241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1276{
style=filled;
color=gray75;
10959[label="42.50.27.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14668[label="42.50.27.105;1pkt 1fpkt", shape=invtriangle, color=brown];
16884[label="42.50.27.105;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1276[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.50.27.105:49755, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49755: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10959--14668[label="1;1pkt 1fpkt"];
10959--16884[label="1;1pkt 1fpkt"];
14668--16884[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="42.50.27.105" src_port="49755"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.152.92.105"/>
    </slice>
    <from sec="1284008835" usec="0"/>
    <to sec="1284008867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.107.223.105"/>
    </slice>
    <from sec="1284009147" usec="0"/>
    <to sec="1284009161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1280{
style=filled;
color=gray75;
10987[label="198.83.101.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14683[label="198.83.101.106;1pkt 1fpkt", shape=invtriangle, color=brown];
16895[label="198.83.101.106;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1280[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.83.101.106:80, 167.190.108.249:56415}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56415: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10987--14683[label="1;1pkt 1fpkt"];
10987--16895[label="1;1pkt 1fpkt"];
14683--16895[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.249" dst_port="56415" src_ip="198.83.101.106" src_port="80"/>
    </slice>
    <from sec="1284009165" usec="0"/>
    <to sec="1284009254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1281{
style=filled;
color=gray75;
11009[label="22.40.125.107;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14695[label="22.40.125.107;7pkt 7fpkt", shape=invtriangle, color=brown];
16905[label="22.40.125.107;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1281[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.40.125.107:*, 167.190.180.98:80}[57.1429%]&lt;BR/&gt;{22.40.125.107:*, 167.190.180.100:80}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36660: (7.14286%)&lt;BR/&gt; 36642: (7.14286%)&lt;BR/&gt; 36641: (7.14286%)&lt;BR/&gt; 36638: (7.14286%)&gt;];
}
11009--14695[label="1;7pkt 7fpkt"];
11009--16905[label="1;7pkt 7fpkt"];
14695--16905[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="22.40.125.107"/>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="22.40.125.107"/>
    </slice>
    <from sec="1284009244" usec="0"/>
    <to sec="1284009264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.90.183.107"/>
    </slice>
    <from sec="1284008954" usec="0"/>
    <to sec="1284008970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.27.187.107"/>
    </slice>
    <from sec="1284008443" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.42.197.107"/>
    </slice>
    <from sec="1284008499" usec="0"/>
    <to sec="1284008574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1285{
style=filled;
color=gray75;
4247[label="199.56.56.113;d;44pkt 44fpkt", shape=diamond, color=yellow];
7958[label="199.56.56.113;d;26pkt 26fpkt", shape=hexagon, color=black];
9460[label="69.68.92.26;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10199[label="28.48.112.66;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11021[label="16.74.21.108;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11448[label="16.119.101.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11528[label="27.176.48.137;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13783[label="69.68.92.26;6pkt 6fpkt", shape=invtriangle, color=brown];
14705[label="16.74.21.108;4pkt 4fpkt", shape=invtriangle, color=brown];
14948[label="16.119.101.132;1pkt 1fpkt", shape=invtriangle, color=brown];
14997[label="27.176.48.137;3pkt 3fpkt", shape=invtriangle, color=brown];
16320[label="69.68.92.26;6pkt 6fpkt", shape=invhouse, color=bisque];
16910[label="16.74.21.108;4pkt 4fpkt", shape=invhouse, color=bisque];
17074[label="27.176.48.137;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1285[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.56.56.113:2000}[54.5455%]&lt;BR/&gt;{21.240.86.61:*, 199.56.56.113:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (29.1304%)&lt;BR/&gt; 26819: (6.52174%)&lt;BR/&gt; 22284: (3.47826%)&lt;BR/&gt; 23078: (2.6087%)&lt;BR/&gt; 1996: (2.17391%)&gt;];
}
4247--7958[label="1;26pkt 26fpkt"];
4247--9460[label="1;6pkt 6fpkt"];
4247--10199[label="1;4pkt 4fpkt"];
4247--11021[label="1;4pkt 4fpkt"];
4247--11448[label="1;1pkt 1fpkt"];
4247--11528[label="1;3pkt 3fpkt"];
4247--13783[label="1;6pkt 6fpkt"];
4247--14705[label="1;4pkt 4fpkt"];
4247--14948[label="1;1pkt 1fpkt"];
4247--14997[label="1;3pkt 3fpkt"];
4247--16320[label="1;6pkt 6fpkt"];
4247--16910[label="1;4pkt 4fpkt"];
4247--17074[label="1;3pkt 3fpkt"];
7958--9460[label="1;6pkt 6fpkt"];
7958--10199[label="1;4pkt 4fpkt"];
7958--11448[label="1;1pkt 1fpkt"];
7958--13783[label="1;6pkt 6fpkt"];
7958--14948[label="1;1pkt 1fpkt"];
7958--16320[label="1;6pkt 6fpkt"];
9460--13783[label="1;6pkt 6fpkt"];
9460--16320[label="1;6pkt 6fpkt"];
11021--14705[label="1;4pkt 4fpkt"];
11021--16910[label="1;4pkt 4fpkt"];
11448--14948[label="1;1pkt 1fpkt"];
11528--14997[label="1;3pkt 3fpkt"];
11528--17074[label="1;3pkt 3fpkt"];
13783--16320[label="1;6pkt 6fpkt"];
14705--16910[label="1;4pkt 4fpkt"];
14997--17074[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.113" src_ip="21.240.86.61"/>
      <filter dst_ip="199.56.56.113" dst_port="2000"/>
    </slice>
    <from sec="1284008428" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
11024[label="131.60.55.108;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14707[label="131.60.55.108;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.55.108:80, 33.73.177.193:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64075: (5%)&lt;BR/&gt; 62221: (5%)&lt;BR/&gt; 60994: (5%)&lt;BR/&gt; 59020: (5%)&gt;];
}
11024--14707[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.177.193" src_ip="131.60.55.108" src_port="80"/>
    </slice>
    <from sec="1284008451" usec="0"/>
    <to sec="1284009208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1287{
style=filled;
color=gray75;
11025[label="20.162.55.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14708[label="20.162.55.108;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1287[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.162.55.108:16106, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16106: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11025--14708[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="20.162.55.108" src_port="16106"/>
    </slice>
    <from sec="1284008624" usec="0"/>
    <to sec="1284009279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1288{
style=filled;
color=gray75;
11026[label="211.149.70.108;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14709[label="211.149.70.108;9pkt 9fpkt", shape=invtriangle, color=brown];
16911[label="211.149.70.108;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1288[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.149.70.108:*, 164.12.129.86:12984}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12984: (50%)&lt;BR/&gt; 3739: (5.55556%)&lt;BR/&gt; 3715: (5.55556%)&lt;BR/&gt; 3683: (5.55556%)&lt;BR/&gt; 3682: (5.55556%)&gt;];
}
11026--14709[label="1;9pkt 9fpkt"];
11026--16911[label="1;9pkt 9fpkt"];
14709--16911[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="164.12.129.86" dst_port="12984" src_ip="211.149.70.108"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284008514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.178.156.108"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1290{
style=filled;
color=gray75;
11035[label="9.0.197.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14713[label="9.0.197.108;1pkt 1fpkt", shape=invtriangle, color=brown];
16913[label="9.0.197.108;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1290[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.0.197.108:58226, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58226: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11035--14713[label="1;1pkt 1fpkt"];
11035--16913[label="1;1pkt 1fpkt"];
14713--16913[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="9.0.197.108" src_port="58226"/>
    </slice>
    <from sec="1284009238" usec="0"/>
    <to sec="1284009252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.46.200.108"/>
    </slice>
    <from sec="1284009136" usec="0"/>
    <to sec="1284009202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1292{
style=filled;
color=gray75;
11085[label="145.105.245.111;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14742[label="145.105.245.111;16pkt 16fpkt", shape=invtriangle, color=brown];
16932[label="145.105.245.111;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1292[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.245.111:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63581: (3.125%)&lt;BR/&gt; 60031: (3.125%)&lt;BR/&gt; 59764: (3.125%)&lt;BR/&gt; 53896: (3.125%)&gt;];
}
11085--14742[label="1;16pkt 16fpkt"];
11085--16932[label="1;16pkt 16fpkt"];
14742--16932[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.245.111" src_port="25"/>
    </slice>
    <from sec="1284008552" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1293{
style=filled;
color=gray75;
3952[label="198.45.56.222;d;20pkt 20fpkt", shape=diamond, color=yellow];
4053[label="194.12.97.78;s;56pkt 56fpkt", shape=diamond, color=yellow];
5544[label="148.175.218.218;d;3pkt 3fpkt", shape=diamond, color=yellow];
8116[label="198.45.56.222;d;15pkt 15fpkt", shape=hexagon, color=black];
10446[label="194.12.97.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10871[label="209.160.3.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12429[label="198.248.134.186;125pkt 125fpkt", shape=pentagon, color=darkviolet];
14358[label="194.12.97.78;1pkt 1fpkt", shape=invtriangle, color=brown];
14613[label="209.160.3.100;1pkt 1fpkt", shape=invtriangle, color=brown];
16697[label="194.12.97.78;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1293[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.248.134.186:*, *:135}[40.404%]&lt;BR/&gt;{194.12.97.78:80, *:*}[28.2828%]&lt;BR/&gt;{198.248.134.186:*, *:445}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (18.0804%)&lt;BR/&gt; 80: (15.4018%)&lt;BR/&gt; 445: (10.0446%)&lt;BR/&gt; 995: (3.125%)&lt;BR/&gt; 993: (2.45536%)&gt;];
}
3952--4053[label="0.2;4pkt 4fpkt"];
3952--6839[label="0.05;1pkt 1fpkt"];
3952--8116[label="1;15pkt 15fpkt"];
3952--8829[label="0.05;1pkt 1fpkt"];
3952--10764[label="0.05;1pkt 1fpkt"];
3952--10871[label="1;1pkt 1fpkt"];
3952--11098[label="0.5;1pkt 1fpkt"];
3952--12429[label="0.05;1pkt 1fpkt"];
3952--14545[label="0.05;1pkt 1fpkt"];
3952--14613[label="1;1pkt 1fpkt"];
3952--16814[label="0.05;1pkt 1fpkt"];
4053--5544[label="0.333333;1pkt 1fpkt"];
4053--6596[label="0.0892857;5pkt 5fpkt"];
4053--7209[label="0.0178571;1pkt 1fpkt"];
4053--7758[label="0.0178571;1pkt 1fpkt"];
4053--8116[label="0.266667;4pkt 4fpkt"];
4053--8206[label="0.0535714;3pkt 3fpkt"];
4053--8835[label="0.0178571;1pkt 1fpkt"];
4053--10446[label="1;1pkt 1fpkt"];
4053--14358[label="1;1pkt 1fpkt"];
4053--16697[label="1;1pkt 1fpkt"];
5544--6244[label="0.333333;1pkt 1fpkt"];
5544--10446[label="1;1pkt 1fpkt"];
5544--14358[label="1;1pkt 1fpkt"];
5544--16697[label="1;1pkt 1fpkt"];
8116--8829[label="0.0666667;1pkt 1fpkt"];
8116--10764[label="0.0666667;1pkt 1fpkt"];
8116--10871[label="1;1pkt 1fpkt"];
8116--14545[label="0.0666667;1pkt 1fpkt"];
8116--14613[label="1;1pkt 1fpkt"];
8116--16814[label="0.0666667;1pkt 1fpkt"];
10446--14358[label="1;1pkt 1fpkt"];
10446--16697[label="1;1pkt 1fpkt"];
10871--14613[label="1;1pkt 1fpkt"];
14358--16697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="198.248.134.186"/>
      <filter dst_port="445" src_ip="198.248.134.186"/>
      <filter src_ip="194.12.97.78" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.74.58.112"/>
    </slice>
    <from sec="1284008998" usec="0"/>
    <to sec="1284009004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.211.78.112"/>
    </slice>
    <from sec="1284009138" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.205.79.112"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1297{
style=filled;
color=gray75;
1031[label="199.56.56.103;d;37pkt 37fpkt", shape=diamond, color=yellow];
6742[label="199.56.56.103;d;20pkt 20fpkt", shape=hexagon, color=black];
9598[label="170.134.52.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10890[label="8.57.234.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11099[label="218.104.128.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14625[label="8.57.234.100;1pkt 1fpkt", shape=invtriangle, color=brown];
14753[label="218.104.128.112;1pkt 1fpkt", shape=invtriangle, color=brown];
16370[label="170.134.52.34;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1297[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.56.56.103:2001}[24.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2001: (11.9048%)&lt;BR/&gt; 0: (7.93651%)&lt;BR/&gt; 31259: (3.1746%)&lt;BR/&gt; 1422: (3.1746%)&lt;BR/&gt; 23546: (2.38095%)&gt;];
}
1031--6742[label="1;20pkt 20fpkt"];
1031--9598[label="1;1pkt 1fpkt"];
1031--10890[label="1;1pkt 1fpkt"];
1031--11099[label="1;1pkt 1fpkt"];
1031--14625[label="1;1pkt 1fpkt"];
1031--14753[label="1;1pkt 1fpkt"];
1031--16370[label="1;1pkt 1fpkt"];
6742--10890[label="1;1pkt 1fpkt"];
6742--14625[label="1;1pkt 1fpkt"];
9598--16370[label="1;1pkt 1fpkt"];
10890--14625[label="1;1pkt 1fpkt"];
11099--14753[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.103" dst_port="2001"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.41.133.112"/>
    </slice>
    <from sec="1284008822" usec="0"/>
    <to sec="1284008845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.92.180.113"/>
    </slice>
    <from sec="1284008484" usec="0"/>
    <to sec="1284008565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1300{
style=filled;
color=gray75;
11144[label="148.52.10.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14775[label="148.52.10.115;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1300[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.10.115:80, 33.73.178.140:55568}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55568: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11144--14775[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.178.140" dst_port="55568" src_ip="148.52.10.115" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1301{
style=filled;
color=gray75;
11155[label="32.68.129.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14781[label="32.68.129.115;1pkt 1fpkt", shape=invtriangle, color=brown];
16953[label="32.68.129.115;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1301[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.68.129.115:55950, 199.56.52.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55950: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11155--14781[label="1;1pkt 1fpkt"];
11155--16953[label="1;1pkt 1fpkt"];
14781--16953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.98" dst_port="80" src_ip="32.68.129.115" src_port="55950"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.94.18.117"/>
    </slice>
    <from sec="1284009091" usec="0"/>
    <to sec="1284009170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.77.117"/>
    </slice>
    <from sec="1284009124" usec="0"/>
    <to sec="1284009143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1304{
style=filled;
color=gray75;
11189[label="198.83.101.117;171pkt 171fpkt", shape=pentagon, color=darkviolet];
14801[label="198.83.101.117;171pkt 171fpkt", shape=invtriangle, color=brown];
16964[label="198.83.101.117;171pkt 171fpkt", shape=invhouse, color=bisque];
stat1304[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.83.101.117:80, 167.190.108.249:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56696: (0.292398%)&lt;BR/&gt; 56682: (0.292398%)&lt;BR/&gt; 56681: (0.292398%)&lt;BR/&gt; 56659: (0.292398%)&gt;];
}
11189--14801[label="1;171pkt 171fpkt"];
11189--16964[label="1;171pkt 171fpkt"];
14801--16964[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.249" src_ip="198.83.101.117" src_port="80"/>
    </slice>
    <from sec="1284009125" usec="0"/>
    <to sec="1284009232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1305{
style=filled;
color=gray75;
11210[label="105.70.129.118;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14813[label="105.70.129.118;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1305[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.70.129.118:80, 167.190.109.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33694: (7.14286%)&lt;BR/&gt; 33670: (7.14286%)&lt;BR/&gt; 32982: (7.14286%)&lt;BR/&gt; 32886: (7.14286%)&gt;];
}
11210--14813[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.109.1" src_ip="105.70.129.118" src_port="80"/>
    </slice>
    <from sec="1284008411" usec="0"/>
    <to sec="1284009132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1306{
style=filled;
color=gray75;
11212[label="199.170.186.118;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14815[label="199.170.186.118;5pkt 5fpkt", shape=invtriangle, color=brown];
16968[label="199.170.186.118;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1306[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.170.186.118:80, 167.190.202.76:61689}[20%]&lt;BR/&gt;{199.170.186.118:80, 167.190.202.76:61690}[20%]&lt;BR/&gt;{199.170.186.118:80, 167.190.202.76:61691}[20%]&lt;BR/&gt;{199.170.186.118:80, 167.190.202.76:61692}[20%]&lt;BR/&gt;{199.170.186.118:80, 167.190.202.76:61693}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61693: (10%)&lt;BR/&gt; 61692: (10%)&lt;BR/&gt; 61691: (10%)&lt;BR/&gt; 61690: (10%)&gt;];
}
11212--14815[label="1;5pkt 5fpkt"];
11212--16968[label="1;5pkt 5fpkt"];
14815--16968[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.202.76" dst_port="61693" src_ip="199.170.186.118" src_port="80"/>
      <filter dst_ip="167.190.202.76" dst_port="61692" src_ip="199.170.186.118" src_port="80"/>
      <filter dst_ip="167.190.202.76" dst_port="61691" src_ip="199.170.186.118" src_port="80"/>
      <filter dst_ip="167.190.202.76" dst_port="61690" src_ip="199.170.186.118" src_port="80"/>
      <filter dst_ip="167.190.202.76" dst_port="61689" src_ip="199.170.186.118" src_port="80"/>
    </slice>
    <from sec="1284009078" usec="0"/>
    <to sec="1284009104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.198.197.118"/>
    </slice>
    <from sec="1284008848" usec="0"/>
    <to sec="1284008888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1308{
style=filled;
color=gray75;
11218[label="118.91.0.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14821[label="118.91.0.119;1pkt 1fpkt", shape=invtriangle, color=brown];
16971[label="118.91.0.119;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1308[shape=component, label=&lt;Rules:&lt;BR/&gt;{118.91.0.119:443, 148.175.172.132:49360}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49360: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
11218--14821[label="1;1pkt 1fpkt"];
11218--16971[label="1;1pkt 1fpkt"];
14821--16971[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.175.172.132" dst_port="49360" src_ip="118.91.0.119" src_port="443"/>
    </slice>
    <from sec="1284009234" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.251.243.120"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1310{
style=filled;
color=gray75;
11251[label="145.105.76.121;26pkt 26fpkt", shape=pentagon, color=darkviolet];
14838[label="145.105.76.121;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1310[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.76.121:25, *:*}[61.5385%]&lt;BR/&gt;{145.105.76.121:*, *:25}[34.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.0769%)&lt;BR/&gt; 65293: (1.92308%)&lt;BR/&gt; 61834: (1.92308%)&lt;BR/&gt; 61145: (1.92308%)&lt;BR/&gt; 59021: (1.92308%)&gt;];
}
11251--14838[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.76.121" src_port="25"/>
      <filter dst_port="25" src_ip="145.105.76.121"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="185.155.202.121"/>
    </slice>
    <from sec="1284008531" usec="0"/>
    <to sec="1284008541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1312{
style=filled;
color=gray75;
11270[label="198.83.101.122;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14848[label="198.83.101.122;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1312[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.83.101.122:80, 167.190.108.249:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56587: (6.25%)&lt;BR/&gt; 56542: (6.25%)&lt;BR/&gt; 56513: (6.25%)&lt;BR/&gt; 56496: (6.25%)&gt;];
}
11270--14848[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.249" src_ip="198.83.101.122" src_port="80"/>
    </slice>
    <from sec="1284009174" usec="0"/>
    <to sec="1284009227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.99.196.122"/>
    </slice>
    <from sec="1284009287" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1314{
style=filled;
color=gray75;
11289[label="217.43.58.123;103pkt 103fpkt", shape=pentagon, color=darkviolet];
14857[label="217.43.58.123;103pkt 103fpkt", shape=invtriangle, color=brown];
stat1314[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.43.58.123:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
11289--14857[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="217.43.58.123" src_port="5060"/>
    </slice>
    <from sec="1284008409" usec="0"/>
    <to sec="1284009287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1315{
style=filled;
color=gray75;
1727[label="148.36.85.237;d;80pkt 80fpkt", shape=diamond, color=yellow];
3795[label="217.8.87.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
4140[label="21.148.33.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
7578[label="148.36.85.237;d;69pkt 69fpkt", shape=hexagon, color=black];
10056[label="69.138.181.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11346[label="22.194.72.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12703[label="21.148.33.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14130[label="69.138.181.57;1pkt 1fpkt", shape=invtriangle, color=brown];
14884[label="22.194.72.127;1pkt 1fpkt", shape=invtriangle, color=brown];
15694[label="21.148.33.203;1pkt 1fpkt", shape=invtriangle, color=brown];
16547[label="69.138.181.57;1pkt 1fpkt", shape=invhouse, color=bisque];
17009[label="22.194.72.127;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1315[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 148.36.85.237:5041}[51.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (76.1006%)&lt;BR/&gt; 8000: (1.25786%)&lt;BR/&gt; 5042: (1.25786%)&lt;BR/&gt; 63095: (0.628931%)&lt;BR/&gt; 54636: (0.628931%)&gt;];
}
1727--3765[label="0.5;1pkt 1fpkt"];
1727--3795[label="1;1pkt 1fpkt"];
1727--4140[label="1;1pkt 1fpkt"];
1727--5112[label="0.0125;1pkt 1fpkt"];
1727--7578[label="1;69pkt 69fpkt"];
1727--8589[label="0.0125;1pkt 1fpkt"];
1727--8872[label="0.0125;1pkt 1fpkt"];
1727--9515[label="0.0125;1pkt 1fpkt"];
1727--10056[label="1;1pkt 1fpkt"];
1727--11346[label="1;1pkt 1fpkt"];
1727--12703[label="1;1pkt 1fpkt"];
1727--13815[label="0.0125;1pkt 1fpkt"];
1727--14130[label="1;1pkt 1fpkt"];
1727--14884[label="1;1pkt 1fpkt"];
1727--15694[label="1;1pkt 1fpkt"];
1727--16344[label="0.0125;1pkt 1fpkt"];
1727--16547[label="1;1pkt 1fpkt"];
1727--17009[label="1;1pkt 1fpkt"];
3795--7578[label="1;1pkt 1fpkt"];
4140--7578[label="1;1pkt 1fpkt"];
4140--12703[label="1;1pkt 1fpkt"];
4140--15694[label="1;1pkt 1fpkt"];
7578--11346[label="1;1pkt 1fpkt"];
7578--12703[label="1;1pkt 1fpkt"];
7578--14884[label="1;1pkt 1fpkt"];
7578--15694[label="1;1pkt 1fpkt"];
7578--17009[label="1;1pkt 1fpkt"];
10056--14130[label="1;1pkt 1fpkt"];
10056--16547[label="1;1pkt 1fpkt"];
11346--14884[label="1;1pkt 1fpkt"];
11346--17009[label="1;1pkt 1fpkt"];
12703--15694[label="1;1pkt 1fpkt"];
14130--16547[label="1;1pkt 1fpkt"];
14884--17009[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.85.237" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="189.40.120.127"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.81.149.127"/>
    </slice>
    <from sec="1284008999" usec="0"/>
    <to sec="1284009001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1318{
style=filled;
color=gray75;
11354[label="36.20.186.127;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14888[label="36.20.186.127;2pkt 2fpkt", shape=invtriangle, color=brown];
17012[label="36.20.186.127;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1318[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.20.186.127:57576, 199.56.53.107:3124}[50%]&lt;BR/&gt;{36.20.186.127:57597, 199.56.53.107:3124}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 57597: (25%)&lt;BR/&gt; 57576: (25%)&gt;];
}
11354--14888[label="1;2pkt 2fpkt"];
11354--17012[label="1;2pkt 2fpkt"];
14888--17012[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.53.107" dst_port="3124" src_ip="36.20.186.127" src_port="57597"/>
      <filter dst_ip="199.56.53.107" dst_port="3124" src_ip="36.20.186.127" src_port="57576"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.23.36.128"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284008999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1320{
style=filled;
color=gray75;
1281[label="167.190.199.6;d;14pkt 14fpkt", shape=diamond, color=yellow];
2276[label="164.12.216.201;d;33pkt 33fpkt", shape=diamond, color=yellow];
2541[label="60.234.36.226;s;5pkt 5fpkt", shape=diamond, color=yellow];
6792[label="167.190.199.6;d;14pkt 14fpkt", shape=hexagon, color=black];
11093[label="209.160.67.112;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11371[label="209.160.67.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13081[label="60.234.36.226;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14748[label="209.160.67.112;5pkt 5fpkt", shape=invtriangle, color=brown];
14901[label="209.160.67.128;2pkt 2fpkt", shape=invtriangle, color=brown];
15900[label="60.234.36.226;6pkt 6fpkt", shape=invtriangle, color=brown];
16935[label="209.160.67.112;5pkt 5fpkt", shape=invhouse, color=bisque];
17021[label="209.160.67.128;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1320[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.13.116.8:*, 164.12.216.201:80}[33.3333%]&lt;BR/&gt;{*:*, 167.190.199.6:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9899%)&lt;BR/&gt; 59999: (2.52525%)&lt;BR/&gt; 58799: (2.52525%)&lt;BR/&gt; 47325: (2.52525%)&lt;BR/&gt; 54975: (2.0202%)&gt;];
}
1281--6792[label="1;14pkt 14fpkt"];
1281--8902[label="0.142857;2pkt 2fpkt"];
1281--11093[label="0.4;2pkt 2fpkt"];
1281--11371[label="0.5;1pkt 1fpkt"];
1281--14748[label="0.4;2pkt 2fpkt"];
1281--14901[label="0.5;1pkt 1fpkt"];
1281--16935[label="0.4;2pkt 2fpkt"];
1281--17021[label="0.5;1pkt 1fpkt"];
2276--2541[label="1;5pkt 5fpkt"];
2276--8884[label="0.121212;4pkt 4fpkt"];
2276--8894[label="0.030303;1pkt 1fpkt"];
2276--8902[label="0.0909091;3pkt 3fpkt"];
2276--8909[label="0.030303;1pkt 1fpkt"];
2276--11093[label="0.2;1pkt 1fpkt"];
2276--13081[label="0.833333;5pkt 5fpkt"];
2276--14748[label="0.2;1pkt 1fpkt"];
2276--15900[label="0.833333;5pkt 5fpkt"];
2276--16935[label="0.2;1pkt 1fpkt"];
2541--8884[label="0.2;1pkt 1fpkt"];
2541--13081[label="1;5pkt 5fpkt"];
2541--15900[label="1;5pkt 5fpkt"];
6792--8902[label="0.142857;2pkt 2fpkt"];
6792--11093[label="0.4;2pkt 2fpkt"];
6792--11371[label="0.5;1pkt 1fpkt"];
6792--14748[label="0.4;2pkt 2fpkt"];
6792--14901[label="0.5;1pkt 1fpkt"];
6792--16935[label="0.4;2pkt 2fpkt"];
6792--17021[label="0.5;1pkt 1fpkt"];
11093--14748[label="1;5pkt 5fpkt"];
11093--16935[label="1;5pkt 5fpkt"];
11371--14901[label="1;2pkt 2fpkt"];
11371--17021[label="1;2pkt 2fpkt"];
13081--15900[label="1;6pkt 6fpkt"];
14748--16935[label="1;5pkt 5fpkt"];
14901--17021[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.199.6" dst_port="80"/>
      <filter dst_ip="164.12.216.201" dst_port="80" src_ip="32.13.116.8"/>
    </slice>
    <from sec="1284008412" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
11383[label="220.13.250.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14911[label="220.13.250.128;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.13.250.128:55708, 145.105.127.25:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55708: (50%)&lt;BR/&gt; 5060: (50%)&gt;];
}
11383--14911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.127.25" dst_port="5060" src_ip="220.13.250.128" src_port="55708"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.152.18.129"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1323{
style=filled;
color=gray75;
11390[label="131.60.55.129;12pkt 12fpkt", shape=pentagon, color=darkviolet];
14918[label="131.60.55.129;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1323[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.55.129:80, 33.73.181.72:*}[58.3333%]&lt;BR/&gt;{131.60.55.129:25, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.1667%)&lt;BR/&gt; 25: (16.6667%)&lt;BR/&gt; 64065: (4.16667%)&lt;BR/&gt; 55329: (4.16667%)&lt;BR/&gt; 45947: (4.16667%)&gt;];
}
11390--14918[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="131.60.55.129" src_port="25"/>
      <filter dst_ip="33.73.181.72" src_ip="131.60.55.129" src_port="80"/>
    </slice>
    <from sec="1284008610" usec="0"/>
    <to sec="1284009282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1324{
style=filled;
color=gray75;
11395[label="148.52.100.129;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14921[label="148.52.100.129;4pkt 4fpkt", shape=invtriangle, color=brown];
17032[label="148.52.100.129;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1324[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.100.129:80, 33.73.176.105:40289}[25%]&lt;BR/&gt;{148.52.100.129:80, 33.73.176.105:48603}[25%]&lt;BR/&gt;{148.52.100.129:80, 33.73.176.105:52105}[25%]&lt;BR/&gt;{148.52.100.129:80, 33.73.176.105:64950}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64950: (12.5%)&lt;BR/&gt; 52105: (12.5%)&lt;BR/&gt; 48603: (12.5%)&lt;BR/&gt; 40289: (12.5%)&gt;];
}
11395--14921[label="1;4pkt 4fpkt"];
11395--17032[label="1;4pkt 4fpkt"];
14921--17032[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.176.105" dst_port="64950" src_ip="148.52.100.129" src_port="80"/>
      <filter dst_ip="33.73.176.105" dst_port="52105" src_ip="148.52.100.129" src_port="80"/>
      <filter dst_ip="33.73.176.105" dst_port="48603" src_ip="148.52.100.129" src_port="80"/>
      <filter dst_ip="33.73.176.105" dst_port="40289" src_ip="148.52.100.129" src_port="80"/>
    </slice>
    <from sec="1284008500" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1325{
style=filled;
color=gray75;
11411[label="167.190.151.130;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14927[label="167.190.151.130;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1325[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.151.130:80, 209.160.67.23:60552}[25%]&lt;BR/&gt;{167.190.151.130:80, 33.73.181.99:52403}[25%]&lt;BR/&gt;{167.190.151.130:80, 32.13.119.129:45169}[25%]&lt;BR/&gt;{167.190.151.130:80, 192.213.134.169:25612}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60552: (12.5%)&lt;BR/&gt; 52403: (12.5%)&lt;BR/&gt; 45169: (12.5%)&lt;BR/&gt; 25612: (12.5%)&gt;];
}
11411--14927[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.213.134.169" dst_port="25612" src_ip="167.190.151.130" src_port="80"/>
      <filter dst_ip="32.13.119.129" dst_port="45169" src_ip="167.190.151.130" src_port="80"/>
      <filter dst_ip="33.73.181.99" dst_port="52403" src_ip="167.190.151.130" src_port="80"/>
      <filter dst_ip="209.160.67.23" dst_port="60552" src_ip="167.190.151.130" src_port="80"/>
    </slice>
    <from sec="1284008548" usec="0"/>
    <to sec="1284009195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.150.10.131"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1327{
style=filled;
color=gray75;
11422[label="183.52.36.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14933[label="183.52.36.131;1pkt 1fpkt", shape=invtriangle, color=brown];
17037[label="183.52.36.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1327[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.52.36.131:26030, 145.105.68.59:14520}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26030: (50%)&lt;BR/&gt; 14520: (50%)&gt;];
}
11422--14933[label="1;1pkt 1fpkt"];
11422--17037[label="1;1pkt 1fpkt"];
14933--17037[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.68.59" dst_port="14520" src_ip="183.52.36.131" src_port="26030"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.159.88.131"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284009167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
1581[label="223.144.31.169;d;2pkt 2fpkt", shape=diamond, color=yellow];
2624[label="57.190.208.70;d;257pkt 257fpkt", shape=diamond, color=yellow];
3117[label="198.45.129.49;s;11pkt 11fpkt", shape=diamond, color=yellow];
7211[label="57.190.208.70;d;257pkt 257fpkt", shape=hexagon, color=black];
7493[label="223.144.31.169;d;2pkt 2fpkt", shape=hexagon, color=black];
10448[label="198.45.128.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11431[label="198.45.128.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14038[label="198.45.129.49;9pkt 9fpkt", shape=invtriangle, color=brown];
14360[label="198.45.128.78;2pkt 2fpkt", shape=invtriangle, color=brown];
14937[label="198.45.128.131;2pkt 2fpkt", shape=invtriangle, color=brown];
17039[label="198.45.128.131;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 57.190.208.70:0}[94.052%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.6204%)&lt;BR/&gt; 51116: (0.364964%)&lt;BR/&gt; 12340: (0.364964%)&lt;BR/&gt; 445: (0.364964%)&lt;BR/&gt; 139: (0.364964%)&gt;];
}
1581--3117[label="1;2pkt 2fpkt"];
1581--7493[label="1;2pkt 2fpkt"];
1581--14038[label="1;2pkt 2fpkt"];
2624--2645[label="0.00389105;1pkt 1fpkt"];
2624--2901[label="0.00598802;1pkt 1fpkt"];
2624--3117[label="0.0909091;1pkt 1fpkt"];
2624--3443[label="0.00675676;1pkt 1fpkt"];
2624--4208[label="0.00389105;1pkt 1fpkt"];
2624--4420[label="0.0333333;1pkt 1fpkt"];
2624--6295[label="0.0217391;1pkt 1fpkt"];
2624--7211[label="1;257pkt 257fpkt"];
2624--10448[label="0.5;1pkt 1fpkt"];
2624--10816[label="0.0416667;1pkt 1fpkt"];
2624--11431[label="0.5;1pkt 1fpkt"];
2624--11714[label="0.047619;1pkt 1fpkt"];
2624--12887[label="0.00389105;1pkt 1fpkt"];
2624--14038[label="0.111111;1pkt 1fpkt"];
2624--14360[label="0.5;1pkt 1fpkt"];
2624--14937[label="0.5;1pkt 1fpkt"];
2624--17039[label="0.5;1pkt 1fpkt"];
3117--4819[label="0.0909091;1pkt 1fpkt"];
3117--7211[label="0.0909091;1pkt 1fpkt"];
3117--7493[label="1;2pkt 2fpkt"];
3117--14038[label="1;9pkt 9fpkt"];
7211--10448[label="0.5;1pkt 1fpkt"];
7211--10816[label="0.0416667;1pkt 1fpkt"];
7211--11431[label="0.5;1pkt 1fpkt"];
7211--11714[label="0.047619;1pkt 1fpkt"];
7211--12887[label="0.00389105;1pkt 1fpkt"];
7211--14038[label="0.111111;1pkt 1fpkt"];
7211--14360[label="0.5;1pkt 1fpkt"];
7211--14937[label="0.5;1pkt 1fpkt"];
7211--17039[label="0.5;1pkt 1fpkt"];
7493--14038[label="1;2pkt 2fpkt"];
10448--14360[label="1;2pkt 2fpkt"];
11431--14937[label="1;2pkt 2fpkt"];
11431--17039[label="1;2pkt 2fpkt"];
14937--17039[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="57.190.208.70"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1330{
style=filled;
color=gray75;
11453[label="27.178.176.132;12pkt 12fpkt", shape=pentagon, color=darkviolet];
14953[label="27.178.176.132;12pkt 12fpkt", shape=invtriangle, color=brown];
17050[label="27.178.176.132;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1330[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.178.176.132:*, 167.190.180.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55737: (4.16667%)&lt;BR/&gt; 55729: (4.16667%)&lt;BR/&gt; 55727: (4.16667%)&lt;BR/&gt; 55719: (4.16667%)&gt;];
}
11453--14953[label="1;12pkt 12fpkt"];
11453--17050[label="1;12pkt 12fpkt"];
14953--17050[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="27.178.176.132"/>
    </slice>
    <from sec="1284009280" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1331{
style=filled;
color=gray75;
11464[label="18.171.39.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14959[label="18.171.39.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1331[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.171.39.133:37028, 167.190.47.4:1602}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37028: (50%)&lt;BR/&gt; 1602: (50%)&gt;];
}
11464--14959[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.47.4" dst_port="1602" src_ip="18.171.39.133" src_port="37028"/>
    </slice>
    <from sec="1284009167" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.48.133"/>
    </slice>
    <from sec="1284008967" usec="0"/>
    <to sec="1284008999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1333{
style=filled;
color=gray75;
11466[label="203.177.131.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14961[label="203.177.131.133;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1333[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.177.131.133:80, 167.190.5.200:57673}[33.3333%]&lt;BR/&gt;{203.177.131.133:80, 167.190.5.194:2982}[33.3333%]&lt;BR/&gt;{203.177.131.133:80, 167.190.5.194:2983}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57673: (16.6667%)&lt;BR/&gt; 2983: (16.6667%)&lt;BR/&gt; 2982: (16.6667%)&gt;];
}
11466--14961[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.5.194" dst_port="2983" src_ip="203.177.131.133" src_port="80"/>
      <filter dst_ip="167.190.5.194" dst_port="2982" src_ip="203.177.131.133" src_port="80"/>
      <filter dst_ip="167.190.5.200" dst_port="57673" src_ip="203.177.131.133" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1334{
style=filled;
color=gray75;
5435[label="145.105.203.65;d;41pkt 41fpkt", shape=diamond, color=yellow];
6527[label="194.208.156.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
9432[label="194.208.156.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11468[label="194.208.159.133;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13446[label="195.114.1.252;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14963[label="194.208.159.133;5pkt 5fpkt", shape=invtriangle, color=brown];
16107[label="195.114.1.252;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1334[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.105.203.65:*}[78.0488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.2836%)&lt;BR/&gt; 49049: (2.23881%)&lt;BR/&gt; 47415: (2.23881%)&lt;BR/&gt; 46877: (2.23881%)&lt;BR/&gt; 46735: (2.23881%)&gt;];
}
5435--5753[label="0.0487805;2pkt 2fpkt"];
5435--6527[label="1;1pkt 1fpkt"];
5435--8589[label="0.0243902;1pkt 1fpkt"];
5435--8872[label="0.0243902;1pkt 1fpkt"];
5435--9432[label="1;1pkt 1fpkt"];
5435--9515[label="0.0243902;1pkt 1fpkt"];
5435--11468[label="1;5pkt 5fpkt"];
5435--13446[label="1;7pkt 7fpkt"];
5435--13815[label="0.0243902;1pkt 1fpkt"];
5435--14963[label="1;5pkt 5fpkt"];
5435--16107[label="1;7pkt 7fpkt"];
5435--16344[label="0.0243902;1pkt 1fpkt"];
6527--9432[label="1;1pkt 1fpkt"];
11468--14963[label="1;5pkt 5fpkt"];
13446--16107[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.203.65" src_port="80"/>
    </slice>
    <from sec="1284008432" usec="0"/>
    <to sec="1284009206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1335{
style=filled;
color=gray75;
11469[label="25.104.170.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14964[label="25.104.170.133;2pkt 2fpkt", shape=invtriangle, color=brown];
17055[label="25.104.170.133;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1335[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.104.170.133:2699, 199.56.44.150:5200}[50%]&lt;BR/&gt;{25.104.170.133:25501, 199.56.44.150:35921}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35921: (25%)&lt;BR/&gt; 25501: (25%)&lt;BR/&gt; 5200: (25%)&lt;BR/&gt; 2699: (25%)&gt;];
}
11469--14964[label="1;2pkt 2fpkt"];
11469--17055[label="1;2pkt 2fpkt"];
14964--17055[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.44.150" dst_port="35921" src_ip="25.104.170.133" src_port="25501"/>
      <filter dst_ip="199.56.44.150" dst_port="5200" src_ip="25.104.170.133" src_port="2699"/>
    </slice>
    <from sec="1284009104" usec="0"/>
    <to sec="1284009138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1336{
style=filled;
color=gray75;
11479[label="29.64.67.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14969[label="29.64.67.134;1pkt 1fpkt", shape=invtriangle, color=brown];
17059[label="29.64.67.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1336[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.64.67.134:80, 167.190.109.157:3151}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3151: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11479--14969[label="1;1pkt 1fpkt"];
11479--17059[label="1;1pkt 1fpkt"];
14969--17059[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.109.157" dst_port="3151" src_ip="29.64.67.134" src_port="80"/>
    </slice>
    <from sec="1284009251" usec="0"/>
    <to sec="1284009252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.174.241.134"/>
    </slice>
    <from sec="1284008426" usec="0"/>
    <to sec="1284008944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.91.140.135"/>
    </slice>
    <from sec="1284009175" usec="0"/>
    <to sec="1284009187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1339{
style=filled;
color=gray75;
11503[label="146.127.169.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14984[label="146.127.169.135;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1339[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.127.169.135:443, 145.105.54.129:63341}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63341: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
11503--14984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.54.129" dst_port="63341" src_ip="146.127.169.135" src_port="443"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1340{
style=filled;
color=gray75;
11508[label="198.4.53.136;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14988[label="198.4.53.136;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1340[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.4.53.136:80, 148.48.129.144:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62575: (7.14286%)&lt;BR/&gt; 62574: (7.14286%)&lt;BR/&gt; 62570: (7.14286%)&lt;BR/&gt; 62569: (7.14286%)&gt;];
}
11508--14988[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.48.129.144" src_ip="198.4.53.136" src_port="80"/>
    </slice>
    <from sec="1284009254" usec="0"/>
    <to sec="1284009256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.42.134.136"/>
    </slice>
    <from sec="1284008853" usec="0"/>
    <to sec="1284008889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.68.52.138"/>
    </slice>
    <from sec="1284008744" usec="0"/>
    <to sec="1284008755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1343{
style=filled;
color=gray75;
11556[label="25.165.183.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15012[label="25.165.183.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1343[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.165.183.138:1682, 199.56.52.83:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1682: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11556--15012[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.83" dst_port="80" src_ip="25.165.183.138" src_port="1682"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1344{
style=filled;
color=gray75;
11557[label="57.198.215.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15013[label="57.198.215.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1344[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.198.215.138:52181, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52181: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11557--15013[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="57.198.215.138" src_port="52181"/>
    </slice>
    <from sec="1284009244" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1345{
style=filled;
color=gray75;
11570[label="9.64.145.139;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15017[label="9.64.145.139;2pkt 2fpkt", shape=invtriangle, color=brown];
17085[label="9.64.145.139;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1345[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.64.145.139:1599, 199.56.33.114:36810}[50%]&lt;BR/&gt;{9.64.145.139:2328, 199.56.33.114:5200}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36810: (25%)&lt;BR/&gt; 5200: (25%)&lt;BR/&gt; 2328: (25%)&lt;BR/&gt; 1599: (25%)&gt;];
}
11570--15017[label="1;2pkt 2fpkt"];
11570--17085[label="1;2pkt 2fpkt"];
15017--17085[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.33.114" dst_port="5200" src_ip="9.64.145.139" src_port="2328"/>
      <filter dst_ip="199.56.33.114" dst_port="36810" src_ip="9.64.145.139" src_port="1599"/>
    </slice>
    <from sec="1284009116" usec="0"/>
    <to sec="1284009142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1346{
style=filled;
color=gray75;
11574[label="23.210.176.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15020[label="23.210.176.139;1pkt 1fpkt", shape=invtriangle, color=brown];
17086[label="23.210.176.139;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1346[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.210.176.139:48517, 145.105.68.59:5041}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48517: (50%)&lt;BR/&gt; 5041: (50%)&gt;];
}
11574--15020[label="1;1pkt 1fpkt"];
11574--17086[label="1;1pkt 1fpkt"];
15020--17086[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.68.59" dst_port="5041" src_ip="23.210.176.139" src_port="48517"/>
    </slice>
    <from sec="1284009207" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1347{
style=filled;
color=gray75;
3160[label="209.160.67.129;d;3pkt 3fpkt", shape=diamond, color=yellow];
11375[label="131.60.155.128;66pkt 66fpkt", shape=pentagon, color=darkviolet];
11579[label="131.60.10.140;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15023[label="131.60.10.140;3pkt 3fpkt", shape=invtriangle, color=brown];
17087[label="131.60.10.140;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1347[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.155.128:80, 33.73.181.83:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42873: (2.5641%)&lt;BR/&gt; 56740: (1.92308%)&lt;BR/&gt; 46727: (1.92308%)&lt;BR/&gt; 63095: (1.28205%)&gt;];
}
3160--11375[label="0.333333;1pkt 1fpkt"];
3160--11579[label="0.333333;1pkt 1fpkt"];
3160--15023[label="0.333333;1pkt 1fpkt"];
3160--17087[label="0.333333;1pkt 1fpkt"];
11579--15023[label="1;3pkt 3fpkt"];
11579--17087[label="1;3pkt 3fpkt"];
15023--17087[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.181.83" src_ip="131.60.155.128" src_port="80"/>
    </slice>
    <from sec="1284008406" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1348{
style=filled;
color=gray75;
196[label="198.45.150.184;d;94pkt 94fpkt", shape=diamond, color=yellow];
199[label="58.245.18.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
267[label="44.33.205.225;s;4pkt 4fpkt", shape=diamond, color=yellow];
309[label="48.34.251.118;s;5pkt 5fpkt", shape=diamond, color=yellow];
507[label="45.96.178.128;s;4pkt 4fpkt", shape=diamond, color=yellow];
665[label="44.37.4.124;s;3pkt 3fpkt", shape=diamond, color=yellow];
756[label="61.49.186.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
897[label="44.40.201.52;s;4pkt 4fpkt", shape=diamond, color=yellow];
1770[label="44.53.140.130;s;3pkt 3fpkt", shape=diamond, color=yellow];
1820[label="58.226.254.228;s;4pkt 4fpkt", shape=diamond, color=yellow];
3245[label="59.143.59.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
3392[label="47.178.134.103;s;2pkt 2fpkt", shape=diamond, color=yellow];
4547[label="50.216.103.17;s;4pkt 4fpkt", shape=diamond, color=yellow];
4556[label="213.4.189.18;s;2pkt 2fpkt", shape=diamond, color=yellow];
4600[label="27.181.130.21;s;31pkt 31fpkt", shape=diamond, color=yellow];
4920[label="198.45.150.251;d;1356pkt 1356fpkt", shape=diamond, color=yellow];
4971[label="47.190.163.30;s;3pkt 3fpkt", shape=diamond, color=yellow];
4978[label="54.135.118.231;s;2pkt 2fpkt", shape=diamond, color=yellow];
5519[label="53.161.201.188;s;2pkt 2fpkt", shape=diamond, color=yellow];
5989[label="20.169.66.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
6409[label="21.240.201.209;s;2pkt 2fpkt", shape=diamond, color=yellow];
8048[label="27.181.130.21;s;2pkt 2fpkt", shape=hexagon, color=black];
8254[label="198.45.150.251;d;979pkt 979fpkt", shape=hexagon, color=black];
8605[label="44.33.205.225;s;4pkt 4fpkt", shape=hexagon, color=black];
9311[label="213.4.189.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9535[label="47.190.163.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9607[label="210.187.204.34;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10555[label="20.169.66.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10886[label="19.65.212.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11228[label="216.108.150.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11297[label="45.96.11.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11410[label="44.53.140.130;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11595[label="54.131.43.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11683[label="25.104.46.146;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12875[label="42.5.36.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13075[label="44.33.205.225;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13155[label="54.135.118.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13697[label="213.4.189.18;1pkt 1fpkt", shape=invtriangle, color=brown];
13828[label="47.190.163.30;1pkt 1fpkt", shape=invtriangle, color=brown];
14622[label="19.65.212.100;1pkt 1fpkt", shape=invtriangle, color=brown];
14825[label="216.108.150.119;1pkt 1fpkt", shape=invtriangle, color=brown];
14926[label="44.53.140.130;3pkt 3fpkt", shape=invtriangle, color=brown];
15028[label="54.131.43.141;1pkt 1fpkt", shape=invtriangle, color=brown];
15792[label="42.5.36.212;2pkt 2fpkt", shape=invtriangle, color=brown];
15945[label="54.135.118.231;1pkt 1fpkt", shape=invtriangle, color=brown];
16271[label="213.4.189.18;1pkt 1fpkt", shape=invhouse, color=bisque];
16855[label="19.65.212.100;1pkt 1fpkt", shape=invhouse, color=bisque];
16973[label="216.108.150.119;1pkt 1fpkt", shape=invhouse, color=bisque];
17091[label="54.131.43.141;1pkt 1fpkt", shape=invhouse, color=bisque];
17522[label="42.5.36.212;2pkt 2fpkt", shape=invhouse, color=bisque];
17626[label="54.135.118.231;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1348[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 198.45.150.251:14557}[25.0861%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14557: (14.1712%)&lt;BR/&gt; 80: (10.3987%)&lt;BR/&gt; 0: (5.43393%)&lt;BR/&gt; 58584: (2.32604%)&lt;BR/&gt; 46159: (1.58327%)&gt;];
}
196--199[label="1;1pkt 1fpkt"];
196--267[label="0.25;1pkt 1fpkt"];
196--309[label="0.2;1pkt 1fpkt"];
196--408[label="0.0319149;3pkt 3fpkt"];
196--507[label="0.25;1pkt 1fpkt"];
196--665[label="0.333333;1pkt 1fpkt"];
196--756[label="1;1pkt 1fpkt"];
196--897[label="0.25;1pkt 1fpkt"];
196--1505[label="0.0106383;1pkt 1fpkt"];
196--1770[label="0.333333;1pkt 1fpkt"];
196--1820[label="0.25;1pkt 1fpkt"];
196--3245[label="1;1pkt 1fpkt"];
196--3392[label="0.5;1pkt 1fpkt"];
196--6839[label="0.0106383;1pkt 1fpkt"];
196--8605[label="0.25;1pkt 1fpkt"];
196--8829[label="0.0106383;1pkt 1fpkt"];
196--9607[label="0.4;2pkt 2fpkt"];
196--10764[label="0.0106383;1pkt 1fpkt"];
196--11410[label="0.333333;1pkt 1fpkt"];
196--11683[label="0.25;1pkt 1fpkt"];
196--13075[label="0.25;1pkt 1fpkt"];
196--14545[label="0.0106383;1pkt 1fpkt"];
196--14926[label="0.333333;1pkt 1fpkt"];
196--16814[label="0.0106383;1pkt 1fpkt"];
267--4920[label="0.75;3pkt 3fpkt"];
267--8254[label="0.75;3pkt 3fpkt"];
267--8605[label="1;4pkt 4fpkt"];
267--13075[label="1;4pkt 4fpkt"];
309--4920[label="0.8;4pkt 4fpkt"];
309--8254[label="0.8;4pkt 4fpkt"];
507--4920[label="0.75;3pkt 3fpkt"];
507--8254[label="0.75;3pkt 3fpkt"];
665--4920[label="0.666667;2pkt 2fpkt"];
665--8254[label="0.666667;2pkt 2fpkt"];
897--4920[label="0.75;3pkt 3fpkt"];
897--8254[label="0.75;3pkt 3fpkt"];
1770--4920[label="0.666667;2pkt 2fpkt"];
1770--8254[label="0.666667;2pkt 2fpkt"];
1770--11410[label="1;3pkt 3fpkt"];
1770--14926[label="1;3pkt 3fpkt"];
1820--4920[label="0.75;3pkt 3fpkt"];
1820--8254[label="0.75;3pkt 3fpkt"];
3392--4920[label="0.5;1pkt 1fpkt"];
3392--8254[label="0.5;1pkt 1fpkt"];
4547--4920[label="1;4pkt 4fpkt"];
4547--8254[label="1;4pkt 4fpkt"];
4556--4920[label="1;2pkt 2fpkt"];
4556--8254[label="1;2pkt 2fpkt"];
4556--9311[label="1;1pkt 1fpkt"];
4556--13697[label="1;1pkt 1fpkt"];
4556--16271[label="1;1pkt 1fpkt"];
4600--4920[label="1;31pkt 31fpkt"];
4600--8048[label="1;2pkt 2fpkt"];
4600--8254[label="0.419355;13pkt 13fpkt"];
4920--4971[label="1;3pkt 3fpkt"];
4920--4978[label="1;2pkt 2fpkt"];
4920--5519[label="1;2pkt 2fpkt"];
4920--5989[label="1;1pkt 1fpkt"];
4920--6409[label="1;2pkt 2fpkt"];
4920--6839[label="0.000737463;1pkt 1fpkt"];
4920--8048[label="1;2pkt 2fpkt"];
4920--8254[label="1;979pkt 979fpkt"];
4920--8605[label="0.75;3pkt 3fpkt"];
4920--8829[label="0.000737463;1pkt 1fpkt"];
4920--8893[label="0.000737463;1pkt 1fpkt"];
4920--8900[label="0.00442478;6pkt 6fpkt"];
4920--8902[label="0.00737463;10pkt 10fpkt"];
4920--9311[label="1;1pkt 1fpkt"];
4920--9535[label="1;1pkt 1fpkt"];
4920--9607[label="0.4;2pkt 2fpkt"];
4920--10555[label="1;1pkt 1fpkt"];
4920--10764[label="0.000737463;1pkt 1fpkt"];
4920--10886[label="1;1pkt 1fpkt"];
4920--11228[label="1;1pkt 1fpkt"];
4920--11297[label="1;1pkt 1fpkt"];
4920--11410[label="0.666667;2pkt 2fpkt"];
4920--11595[label="1;1pkt 1fpkt"];
4920--11683[label="0.75;3pkt 3fpkt"];
4920--11838[label="0.00392157;1pkt 1fpkt"];
4920--12875[label="1;2pkt 2fpkt"];
4920--13075[label="0.75;3pkt 3fpkt"];
4920--13155[label="1;1pkt 1fpkt"];
4920--13697[label="1;1pkt 1fpkt"];
4920--13828[label="1;1pkt 1fpkt"];
4920--14545[label="0.000737463;1pkt 1fpkt"];
4920--14622[label="1;1pkt 1fpkt"];
4920--14825[label="1;1pkt 1fpkt"];
4920--14926[label="0.666667;2pkt 2fpkt"];
4920--15028[label="1;1pkt 1fpkt"];
4920--15186[label="0.00392157;1pkt 1fpkt"];
4920--15792[label="1;2pkt 2fpkt"];
4920--15945[label="1;1pkt 1fpkt"];
4920--16271[label="1;1pkt 1fpkt"];
4920--16814[label="0.000737463;1pkt 1fpkt"];
4920--16855[label="1;1pkt 1fpkt"];
4920--16973[label="1;1pkt 1fpkt"];
4920--17091[label="1;1pkt 1fpkt"];
4920--17190[label="0.00392157;1pkt 1fpkt"];
4920--17522[label="1;2pkt 2fpkt"];
4920--17626[label="1;1pkt 1fpkt"];
4971--8254[label="1;3pkt 3fpkt"];
4971--9535[label="1;1pkt 1fpkt"];
4971--13828[label="1;1pkt 1fpkt"];
4978--8254[label="1;2pkt 2fpkt"];
4978--13155[label="1;1pkt 1fpkt"];
4978--15945[label="1;1pkt 1fpkt"];
4978--17626[label="1;1pkt 1fpkt"];
5519--8254[label="1;2pkt 2fpkt"];
5989--8254[label="1;1pkt 1fpkt"];
5989--10555[label="1;1pkt 1fpkt"];
6409--8254[label="1;2pkt 2fpkt"];
8048--8254[label="1;2pkt 2fpkt"];
8254--8605[label="0.75;3pkt 3fpkt"];
8254--8829[label="0.00102145;1pkt 1fpkt"];
8254--8900[label="0.0061287;6pkt 6fpkt"];
8254--8902[label="0.0102145;10pkt 10fpkt"];
8254--9311[label="1;1pkt 1fpkt"];
8254--9535[label="1;1pkt 1fpkt"];
8254--10555[label="1;1pkt 1fpkt"];
8254--10764[label="0.00102145;1pkt 1fpkt"];
8254--10886[label="1;1pkt 1fpkt"];
8254--11228[label="1;1pkt 1fpkt"];
8254--11410[label="0.666667;2pkt 2fpkt"];
8254--11683[label="0.25;1pkt 1fpkt"];
8254--12875[label="1;2pkt 2fpkt"];
8254--13075[label="0.75;3pkt 3fpkt"];
8254--13155[label="1;1pkt 1fpkt"];
8254--13697[label="1;1pkt 1fpkt"];
8254--13828[label="1;1pkt 1fpkt"];
8254--14545[label="0.00102145;1pkt 1fpkt"];
8254--14622[label="1;1pkt 1fpkt"];
8254--14825[label="1;1pkt 1fpkt"];
8254--14926[label="0.666667;2pkt 2fpkt"];
8254--15792[label="1;2pkt 2fpkt"];
8254--15945[label="1;1pkt 1fpkt"];
8254--16271[label="1;1pkt 1fpkt"];
8254--16814[label="0.00102145;1pkt 1fpkt"];
8254--16855[label="1;1pkt 1fpkt"];
8254--16973[label="1;1pkt 1fpkt"];
8254--17522[label="1;2pkt 2fpkt"];
8254--17626[label="1;1pkt 1fpkt"];
8605--13075[label="1;4pkt 4fpkt"];
9311--13697[label="1;1pkt 1fpkt"];
9311--16271[label="1;1pkt 1fpkt"];
9535--13828[label="1;1pkt 1fpkt"];
10886--14622[label="1;1pkt 1fpkt"];
10886--16855[label="1;1pkt 1fpkt"];
11228--14825[label="1;1pkt 1fpkt"];
11228--16973[label="1;1pkt 1fpkt"];
11410--14926[label="1;3pkt 3fpkt"];
11595--15028[label="1;1pkt 1fpkt"];
11595--17091[label="1;1pkt 1fpkt"];
12875--15792[label="1;2pkt 2fpkt"];
12875--17522[label="1;2pkt 2fpkt"];
13155--15945[label="1;1pkt 1fpkt"];
13155--17626[label="1;1pkt 1fpkt"];
13697--16271[label="1;1pkt 1fpkt"];
14622--16855[label="1;1pkt 1fpkt"];
14825--16973[label="1;1pkt 1fpkt"];
15028--17091[label="1;1pkt 1fpkt"];
15792--17522[label="1;2pkt 2fpkt"];
15945--17626[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.150.251" dst_port="14557"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1349{
style=filled;
color=gray75;
11603[label="39.84.176.141;71pkt 71fpkt", shape=pentagon, color=darkviolet];
15034[label="39.84.176.141;71pkt 71fpkt", shape=invtriangle, color=brown];
stat1349[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.84.176.141:*, 167.190.180.119:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 59022: (0.704225%)&lt;BR/&gt; 59021: (0.704225%)&lt;BR/&gt; 59020: (0.704225%)&lt;BR/&gt; 59019: (0.704225%)&gt;];
}
11603--15034[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.119" dst_port="3124" src_ip="39.84.176.141"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1350{
style=filled;
color=gray75;
11608[label="21.96.114.142;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15038[label="21.96.114.142;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1350[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.96.114.142:49818, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49818: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11608--15038[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="21.96.114.142" src_port="49818"/>
    </slice>
    <from sec="1284008689" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.116.228.142"/>
    </slice>
    <from sec="1284009000" usec="0"/>
    <to sec="1284009012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1352{
style=filled;
color=gray75;
11625[label="182.27.172.143;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15050[label="182.27.172.143;2pkt 2fpkt", shape=invtriangle, color=brown];
17104[label="182.27.172.143;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1352[shape=component, label=&lt;Rules:&lt;BR/&gt;{182.27.172.143:12441, 199.56.52.98:80}[50%]&lt;BR/&gt;{182.27.172.143:13126, 199.56.52.98:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13126: (25%)&lt;BR/&gt; 12441: (25%)&gt;];
}
11625--15050[label="1;2pkt 2fpkt"];
11625--17104[label="1;2pkt 2fpkt"];
15050--17104[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.98" dst_port="80" src_ip="182.27.172.143" src_port="13126"/>
      <filter dst_ip="199.56.52.98" dst_port="80" src_ip="182.27.172.143" src_port="12441"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1353{
style=filled;
color=gray75;
11634[label="216.160.16.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15053[label="216.160.16.144;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1353[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.160.16.144:1546, 199.56.52.83:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1546: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11634--15053[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.83" dst_port="80" src_ip="216.160.16.144" src_port="1546"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1354{
style=filled;
color=gray75;
11637[label="52.84.23.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15056[label="52.84.23.144;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1354[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.84.23.144:61856, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61856: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11637--15056[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="52.84.23.144" src_port="61856"/>
    </slice>
    <from sec="1284008578" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1355{
style=filled;
color=gray75;
11644[label="21.172.113.144;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15061[label="21.172.113.144;3pkt 3fpkt", shape=invtriangle, color=brown];
17110[label="21.172.113.144;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1355[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.172.113.144:9262, 145.105.189.49:443}[33.3333%]&lt;BR/&gt;{21.172.113.144:40559, 145.105.189.49:443}[33.3333%]&lt;BR/&gt;{21.172.113.144:49458, 145.105.189.49:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49458: (16.6667%)&lt;BR/&gt; 40559: (16.6667%)&lt;BR/&gt; 9262: (16.6667%)&gt;];
}
11644--15061[label="1;3pkt 3fpkt"];
11644--17110[label="1;3pkt 3fpkt"];
15061--17110[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.189.49" dst_port="443" src_ip="21.172.113.144" src_port="49458"/>
      <filter dst_ip="145.105.189.49" dst_port="443" src_ip="21.172.113.144" src_port="40559"/>
      <filter dst_ip="145.105.189.49" dst_port="443" src_ip="21.172.113.144" src_port="9262"/>
    </slice>
    <from sec="1284008428" usec="0"/>
    <to sec="1284009005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.45.115.144"/>
    </slice>
    <from sec="1284008551" usec="0"/>
    <to sec="1284008727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.68.116.144"/>
    </slice>
    <from sec="1284008871" usec="0"/>
    <to sec="1284008883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.86.133.144"/>
    </slice>
    <from sec="1284009205" usec="0"/>
    <to sec="1284009213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.80.153.144"/>
    </slice>
    <from sec="1284008862" usec="0"/>
    <to sec="1284008867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.139.162.144"/>
    </slice>
    <from sec="1284008947" usec="0"/>
    <to sec="1284008986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.218.144"/>
    </slice>
    <from sec="1284009029" usec="0"/>
    <to sec="1284009058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.62.46.145"/>
    </slice>
    <from sec="1284009229" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.19.96.145"/>
    </slice>
    <from sec="1284008795" usec="0"/>
    <to sec="1284008809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.136.52.146"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284008991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="118.80.199.146"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.15.69.147"/>
    </slice>
    <from sec="1284008750" usec="0"/>
    <to sec="1284008769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="105.84.8.148"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="187.65.92.148"/>
    </slice>
    <from sec="1284008787" usec="0"/>
    <to sec="1284008809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1370{
style=filled;
color=gray75;
11736[label="48.57.170.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15122[label="48.57.170.148;1pkt 1fpkt", shape=invtriangle, color=brown];
17146[label="48.57.170.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1370[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.57.170.148:49206, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49206: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11736--15122[label="1;1pkt 1fpkt"];
11736--17146[label="1;1pkt 1fpkt"];
15122--17146[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="48.57.170.148" src_port="49206"/>
    </slice>
    <from sec="1284009260" usec="0"/>
    <to sec="1284009267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.137.186.148"/>
    </slice>
    <from sec="1284008951" usec="0"/>
    <to sec="1284008966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.224.33.149"/>
    </slice>
    <from sec="1284008849" usec="0"/>
    <to sec="1284008857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="185.43.38.149"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284009001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.64.87.149"/>
    </slice>
    <from sec="1284009211" usec="0"/>
    <to sec="1284009239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1375{
style=filled;
color=gray75;
11761[label="148.196.204.149;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15141[label="148.196.204.149;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1375[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.196.204.149:2953, 199.56.33.114:5200}[50%]&lt;BR/&gt;{148.196.204.149:26530, 199.56.33.114:56290}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56290: (25%)&lt;BR/&gt; 26530: (25%)&lt;BR/&gt; 5200: (25%)&lt;BR/&gt; 2953: (25%)&gt;];
}
11761--15141[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.33.114" dst_port="56290" src_ip="148.196.204.149" src_port="26530"/>
      <filter dst_ip="199.56.33.114" dst_port="5200" src_ip="148.196.204.149" src_port="2953"/>
    </slice>
    <from sec="1284009244" usec="0"/>
    <to sec="1284009278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1376{
style=filled;
color=gray75;
11772[label="88.237.92.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15146[label="88.237.92.150;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1376[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.237.92.150:57072, 167.190.180.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57072: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11772--15146[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.28" dst_port="80" src_ip="88.237.92.150" src_port="57072"/>
    </slice>
    <from sec="1284009232" usec="0"/>
    <to sec="1284009238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.178.15.151"/>
    </slice>
    <from sec="1284008545" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.88.39.151"/>
    </slice>
    <from sec="1284009025" usec="0"/>
    <to sec="1284009030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.243.43.151"/>
    </slice>
    <from sec="1284009242" usec="0"/>
    <to sec="1284009253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1380{
style=filled;
color=gray75;
11794[label="137.5.113.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15160[label="137.5.113.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1380[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.5.113.151:49490, 192.168.254.200:161}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49490: (50%)&lt;BR/&gt; 161: (50%)&gt;];
}
11794--15160[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.254.200" dst_port="161" src_ip="137.5.113.151" src_port="49490"/>
    </slice>
    <from sec="1284008426" usec="0"/>
    <to sec="1284009287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1381{
style=filled;
color=gray75;
11798[label="29.45.141.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15164[label="29.45.141.151;1pkt 1fpkt", shape=invtriangle, color=brown];
17175[label="29.45.141.151;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1381[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.45.141.151:25288, 199.56.48.176:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25288: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11798--15164[label="1;1pkt 1fpkt"];
11798--17175[label="1;1pkt 1fpkt"];
15164--17175[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.176" dst_port="80" src_ip="29.45.141.151" src_port="25288"/>
    </slice>
    <from sec="1284009260" usec="0"/>
    <to sec="1284009279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1382{
style=filled;
color=gray75;
11805[label="32.202.20.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15168[label="32.202.20.152;1pkt 1fpkt", shape=invtriangle, color=brown];
17178[label="32.202.20.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1382[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.202.20.152:54309, 199.56.52.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54309: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11805--15168[label="1;1pkt 1fpkt"];
11805--17178[label="1;1pkt 1fpkt"];
15168--17178[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.99" dst_port="80" src_ip="32.202.20.152" src_port="54309"/>
    </slice>
    <from sec="1284008647" usec="0"/>
    <to sec="1284009297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1383{
style=filled;
color=gray75;
11808[label="145.105.55.152;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15170[label="145.105.55.152;3pkt 3fpkt", shape=invtriangle, color=brown];
17180[label="145.105.55.152;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1383[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.55.152:1183, 209.35.194.27:80}[33.3333%]&lt;BR/&gt;{145.105.55.152:1184, 209.35.194.27:80}[33.3333%]&lt;BR/&gt;{145.105.55.152:1185, 209.35.194.27:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1185: (16.6667%)&lt;BR/&gt; 1184: (16.6667%)&lt;BR/&gt; 1183: (16.6667%)&gt;];
}
11808--15170[label="1;3pkt 3fpkt"];
11808--17180[label="1;3pkt 3fpkt"];
15170--17180[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.35.194.27" dst_port="80" src_ip="145.105.55.152" src_port="1185"/>
      <filter dst_ip="209.35.194.27" dst_port="80" src_ip="145.105.55.152" src_port="1184"/>
      <filter dst_ip="209.35.194.27" dst_port="80" src_ip="145.105.55.152" src_port="1183"/>
    </slice>
    <from sec="1284009210" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.187.116.152"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.43.208.152"/>
    </slice>
    <from sec="1284008940" usec="0"/>
    <to sec="1284008980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1386{
style=filled;
color=gray75;
11856[label="145.105.81.155;28pkt 28fpkt", shape=pentagon, color=darkviolet];
15194[label="145.105.81.155;28pkt 28fpkt", shape=invtriangle, color=brown];
17193[label="145.105.81.155;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1386[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.81.155:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63717: (1.78571%)&lt;BR/&gt; 63160: (1.78571%)&lt;BR/&gt; 59731: (1.78571%)&lt;BR/&gt; 56929: (1.78571%)&gt;];
}
11856--15194[label="1;28pkt 28fpkt"];
11856--17193[label="1;28pkt 28fpkt"];
15194--17193[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.81.155" src_port="25"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.86.84.155"/>
    </slice>
    <from sec="1284008403" usec="0"/>
    <to sec="1284008423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.106.16.156"/>
    </slice>
    <from sec="1284008929" usec="0"/>
    <to sec="1284008932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1390{
style=filled;
color=gray75;
11882[label="21.224.27.157;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15209[label="21.224.27.157;2pkt 2fpkt", shape=invtriangle, color=brown];
17199[label="21.224.27.157;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1390[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.224.27.157:2221, 199.56.33.114:5200}[50%]&lt;BR/&gt;{21.224.27.157:12100, 199.56.33.114:50647}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50647: (25%)&lt;BR/&gt; 12100: (25%)&lt;BR/&gt; 5200: (25%)&lt;BR/&gt; 2221: (25%)&gt;];
}
11882--15209[label="1;2pkt 2fpkt"];
11882--17199[label="1;2pkt 2fpkt"];
15209--17199[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.33.114" dst_port="50647" src_ip="21.224.27.157" src_port="12100"/>
      <filter dst_ip="199.56.33.114" dst_port="5200" src_ip="21.224.27.157" src_port="2221"/>
    </slice>
    <from sec="1284009053" usec="0"/>
    <to sec="1284009095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1391{
style=filled;
color=gray75;
11883[label="137.5.40.157;48pkt 48fpkt", shape=pentagon, color=darkviolet];
15210[label="137.5.40.157;48pkt 48fpkt", shape=invtriangle, color=brown];
17200[label="137.5.40.157;48pkt 48fpkt", shape=invhouse, color=bisque];
stat1391[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.5.40.157:*, 199.120.65.151:80}[22.9167%]&lt;BR/&gt;{137.5.40.157:*, 199.120.65.153:80}[20.8333%]&lt;BR/&gt;{137.5.40.157:*, 211.243.75.254:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65448: (1.04167%)&lt;BR/&gt; 64920: (1.04167%)&lt;BR/&gt; 64661: (1.04167%)&lt;BR/&gt; 64657: (1.04167%)&gt;];
}
11883--15210[label="1;48pkt 48fpkt"];
11883--17200[label="1;48pkt 48fpkt"];
15210--17200[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="199.120.65.151" dst_port="80" src_ip="137.5.40.157"/>
      <filter dst_ip="211.243.75.254" dst_port="80" src_ip="137.5.40.157"/>
      <filter dst_ip="199.120.65.153" dst_port="80" src_ip="137.5.40.157"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.212.137.157"/>
    </slice>
    <from sec="1284008637" usec="0"/>
    <to sec="1284008654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1393{
style=filled;
color=gray75;
11898[label="148.36.237.157;121pkt 121fpkt", shape=pentagon, color=darkviolet];
15220[label="148.36.237.157;121pkt 121fpkt", shape=invtriangle, color=brown];
17205[label="148.36.237.157;121pkt 121fpkt", shape=invhouse, color=bisque];
stat1393[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.237.157:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11898--15220[label="1;121pkt 121fpkt"];
11898--17205[label="1;121pkt 121fpkt"];
15220--17205[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="148.36.237.157"/>
    </slice>
    <from sec="1284008414" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="135.126.132.158"/>
    </slice>
    <from sec="1284008424" usec="0"/>
    <to sec="1284008524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.247.22.159"/>
    </slice>
    <from sec="1284008971" usec="0"/>
    <to sec="1284009029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.86.237.159"/>
    </slice>
    <from sec="1284008967" usec="0"/>
    <to sec="1284009005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1397{
style=filled;
color=gray75;
11933[label="145.105.21.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15241[label="145.105.21.160;2pkt 2fpkt", shape=invtriangle, color=brown];
17214[label="145.105.21.160;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1397[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.21.160:52612, 146.127.169.205:443}[50%]&lt;BR/&gt;{145.105.21.160:52613, 146.127.169.205:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 52613: (25%)&lt;BR/&gt; 52612: (25%)&gt;];
}
11933--15241[label="1;2pkt 2fpkt"];
11933--17214[label="1;2pkt 2fpkt"];
15241--17214[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="146.127.169.205" dst_port="443" src_ip="145.105.21.160" src_port="52613"/>
      <filter dst_ip="146.127.169.205" dst_port="443" src_ip="145.105.21.160" src_port="52612"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1398{
style=filled;
color=gray75;
11943[label="44.87.82.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15249[label="44.87.82.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1398[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.87.82.160:49465, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49465: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11943--15249[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="44.87.82.160" src_port="49465"/>
    </slice>
    <from sec="1284009248" usec="0"/>
    <to sec="1284009257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.143.174.160"/>
    </slice>
    <from sec="1284008413" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.93.218.160"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2217,2.48081,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1401{
style=filled;
color=gray75;
431[label="218.3.237.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
432[label="145.105.20.218;s;135pkt 135fpkt", shape=diamond, color=yellow];
562[label="17.165.1.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
582[label="218.3.237.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
735[label="218.3.237.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
820[label="221.198.250.200;d;2pkt 2fpkt", shape=diamond, color=yellow];
5559[label="19.41.219.128;d;16pkt 16fpkt", shape=diamond, color=yellow];
6685[label="218.3.237.191;d;1pkt 1fpkt", shape=hexagon, color=black];
6917[label="218.3.237.71;d;1pkt 1fpkt", shape=hexagon, color=black];
stat1401[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.20.218:57949, *:*}[62.9371%]&lt;BR/&gt;{145.105.20.218:*, *:19101}[30.0699%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57949: (28.3019%)&lt;BR/&gt; 19101: (19.1824%)&lt;BR/&gt; 52381: (0.943396%)&lt;BR/&gt; 52363: (0.943396%)&lt;BR/&gt; 80: (0.943396%)&gt;];
}
431--432[label="1;1pkt 1fpkt"];
432--562[label="1;1pkt 1fpkt"];
432--582[label="1;1pkt 1fpkt"];
432--735[label="1;1pkt 1fpkt"];
432--820[label="1;2pkt 2fpkt"];
432--4101[label="0.0294118;1pkt 1fpkt"];
432--4739[label="0.00740741;1pkt 1fpkt"];
432--5409[label="0.00740741;1pkt 1fpkt"];
432--5559[label="0.5;8pkt 8fpkt"];
432--6685[label="1;1pkt 1fpkt"];
432--6917[label="1;1pkt 1fpkt"];
432--7888[label="0.0294118;1pkt 1fpkt"];
432--8413[label="0.00925926;1pkt 1fpkt"];
432--8894[label="0.0222222;3pkt 3fpkt"];
582--6917[label="1;1pkt 1fpkt"];
735--6685[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.105.20.218" src_port="57949"/>
      <filter dst_port="19101" src_ip="145.105.20.218"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1402{
style=filled;
color=gray75;
11997[label="198.148.158.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15280[label="198.148.158.162;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1402[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.148.158.162:19440, 199.56.52.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19440: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11997--15280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.99" dst_port="80" src_ip="198.148.158.162" src_port="19440"/>
    </slice>
    <from sec="1284008642" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1403{
style=filled;
color=gray75;
12012[label="34.250.35.163;12pkt 12fpkt", shape=pentagon, color=darkviolet];
15288[label="34.250.35.163;12pkt 12fpkt", shape=invtriangle, color=brown];
17242[label="34.250.35.163;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1403[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.250.35.163:*, 148.36.34.151:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 60027: (4.16667%)&lt;BR/&gt; 60026: (4.16667%)&lt;BR/&gt; 60025: (4.16667%)&lt;BR/&gt; 60024: (4.16667%)&gt;];
}
12012--15288[label="1;12pkt 12fpkt"];
12012--17242[label="1;12pkt 12fpkt"];
15288--17242[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.34.151" dst_port="443" src_ip="34.250.35.163"/>
    </slice>
    <from sec="1284009139" usec="0"/>
    <to sec="1284009154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.234.69.163"/>
    </slice>
    <from sec="1284008849" usec="0"/>
    <to sec="1284009131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1405{
style=filled;
color=gray75;
12015[label="145.105.80.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15292[label="145.105.80.163;2pkt 2fpkt", shape=invtriangle, color=brown];
17244[label="145.105.80.163;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1405[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.80.163:80, 222.209.242.214:52675}[50%]&lt;BR/&gt;{145.105.80.163:80, 222.209.242.214:54665}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54665: (25%)&lt;BR/&gt; 52675: (25%)&gt;];
}
12015--15292[label="1;2pkt 2fpkt"];
12015--17244[label="1;2pkt 2fpkt"];
15292--17244[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="222.209.242.214" dst_port="54665" src_ip="145.105.80.163" src_port="80"/>
      <filter dst_ip="222.209.242.214" dst_port="52675" src_ip="145.105.80.163" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1406{
style=filled;
color=gray75;
12031[label="209.1.28.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15301[label="209.1.28.164;1pkt 1fpkt", shape=invtriangle, color=brown];
17250[label="209.1.28.164;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1406[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.1.28.164:80, 167.190.245.20:1991}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1991: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12031--15301[label="1;1pkt 1fpkt"];
12031--17250[label="1;1pkt 1fpkt"];
15301--17250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.245.20" dst_port="1991" src_ip="209.1.28.164" src_port="80"/>
    </slice>
    <from sec="1284009270" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="186.46.29.164"/>
    </slice>
    <from sec="1284008977" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1408{
style=filled;
color=gray75;
12044[label="167.190.108.164;153pkt 153fpkt", shape=pentagon, color=darkviolet];
15308[label="167.190.108.164;153pkt 153fpkt", shape=invtriangle, color=brown];
stat1408[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.108.164:10875, *:*}[90.1961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10875: (45.098%)&lt;BR/&gt; 80: (2.94118%)&lt;BR/&gt; 443: (1.63399%)&lt;BR/&gt; 65232: (0.326797%)&lt;BR/&gt; 64772: (0.326797%)&gt;];
}
12044--15308[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter src_ip="167.190.108.164" src_port="10875"/>
    </slice>
    <from sec="1284008409" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.44.142.164"/>
    </slice>
    <from sec="1284008673" usec="0"/>
    <to sec="1284008706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1410{
style=filled;
color=gray75;
12048[label="145.105.171.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15310[label="145.105.171.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1410[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.171.164:60943, 35.104.171.25:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60943: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
12048--15310[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="35.104.171.25" dst_port="443" src_ip="145.105.171.164" src_port="60943"/>
    </slice>
    <from sec="1284009209" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.175.197.164"/>
    </slice>
    <from sec="1284008953" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.67.92.165"/>
    </slice>
    <from sec="1284008778" usec="0"/>
    <to sec="1284008791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.75.94.166"/>
    </slice>
    <from sec="1284008860" usec="0"/>
    <to sec="1284008868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.36.208.166"/>
    </slice>
    <from sec="1284009231" usec="0"/>
    <to sec="1284009260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.41.179.167"/>
    </slice>
    <from sec="1284008709" usec="0"/>
    <to sec="1284008751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.164.181.167"/>
    </slice>
    <from sec="1284008439" usec="0"/>
    <to sec="1284008469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.40.77.168"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.191.102.168"/>
    </slice>
    <from sec="1284008579" usec="0"/>
    <to sec="1284008801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.104.141.168"/>
    </slice>
    <from sec="1284009141" usec="0"/>
    <to sec="1284009149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
12129[label="220.181.32.169;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15358[label="220.181.32.169;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.181.32.169:*, 167.190.180.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1128: (8.33333%)&lt;BR/&gt; 1126: (8.33333%)&lt;BR/&gt; 1125: (8.33333%)&lt;BR/&gt; 1122: (8.33333%)&gt;];
}
12129--15358[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="220.181.32.169"/>
    </slice>
    <from sec="1284009288" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="187.238.144.171"/>
    </slice>
    <from sec="1284008758" usec="0"/>
    <to sec="1284008766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.17.146.171"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1424{
style=filled;
color=gray75;
12207[label="144.1.170.172;8pkt 8fpkt", shape=pentagon, color=darkviolet];
15405[label="144.1.170.172;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1424[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.1.170.172:80, 27.45.14.117:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5663: (6.25%)&lt;BR/&gt; 5662: (6.25%)&lt;BR/&gt; 5661: (6.25%)&lt;BR/&gt; 5660: (6.25%)&gt;];
}
12207--15405[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="27.45.14.117" src_ip="144.1.170.172" src_port="80"/>
    </slice>
    <from sec="1284008931" usec="0"/>
    <to sec="1284009280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.40.148.173"/>
    </slice>
    <from sec="1284008942" usec="0"/>
    <to sec="1284008981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.212.174"/>
    </slice>
    <from sec="1284008964" usec="0"/>
    <to sec="1284008978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.88.136.175"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284008983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1430{
style=filled;
color=gray75;
12252[label="145.105.180.175;38pkt 38fpkt", shape=pentagon, color=darkviolet];
15437[label="145.105.180.175;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1430[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.180.175:*, 192.168.253.5:515}[92.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 515: (46.0526%)&lt;BR/&gt; 80: (3.94737%)&lt;BR/&gt; 4047: (1.31579%)&lt;BR/&gt; 4046: (1.31579%)&lt;BR/&gt; 4045: (1.31579%)&gt;];
}
12252--15437[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.253.5" dst_port="515" src_ip="145.105.180.175"/>
    </slice>
    <from sec="1284008418" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.181.175"/>
    </slice>
    <from sec="1284008990" usec="0"/>
    <to sec="1284009006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.51.16.176"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.7.70.176"/>
    </slice>
    <from sec="1284008558" usec="0"/>
    <to sec="1284008684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1434{
style=filled;
color=gray75;
12271[label="167.190.222.176;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15447[label="167.190.222.176;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1434[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.222.176:80, 33.73.182.54:41002}[20%]&lt;BR/&gt;{167.190.222.176:80, 32.13.118.70:55397}[20%]&lt;BR/&gt;{167.190.222.176:80, 32.13.119.79:44481}[20%]&lt;BR/&gt;{167.190.222.176:80, 42.241.80.162:42746}[20%]&lt;BR/&gt;{167.190.222.176:80, 192.213.22.232:52956}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55397: (10%)&lt;BR/&gt; 52956: (10%)&lt;BR/&gt; 44481: (10%)&lt;BR/&gt; 42746: (10%)&gt;];
}
12271--15447[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.213.22.232" dst_port="52956" src_ip="167.190.222.176" src_port="80"/>
      <filter dst_ip="42.241.80.162" dst_port="42746" src_ip="167.190.222.176" src_port="80"/>
      <filter dst_ip="32.13.119.79" dst_port="44481" src_ip="167.190.222.176" src_port="80"/>
      <filter dst_ip="32.13.118.70" dst_port="55397" src_ip="167.190.222.176" src_port="80"/>
      <filter dst_ip="33.73.182.54" dst_port="41002" src_ip="167.190.222.176" src_port="80"/>
    </slice>
    <from sec="1284008651" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.97.48.177"/>
    </slice>
    <from sec="1284008702" usec="0"/>
    <to sec="1284008720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1436{
style=filled;
color=gray75;
12287[label="198.45.129.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15457[label="198.45.129.177;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1436[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.129.177:0, 42.66.130.103:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12287--15457[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.66.130.103" src_ip="198.45.129.177"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.72.178.178"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.109.217.178"/>
    </slice>
    <from sec="1284009264" usec="0"/>
    <to sec="1284009281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1440{
style=filled;
color=gray75;
12319[label="164.50.97.179;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15475[label="164.50.97.179;2pkt 2fpkt", shape=invtriangle, color=brown];
17346[label="164.50.97.179;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1440[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.50.97.179:80, 145.105.73.110:3328}[50%]&lt;BR/&gt;{164.50.97.179:80, 145.105.73.110:3330}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3330: (25%)&lt;BR/&gt; 3328: (25%)&gt;];
}
12319--15475[label="1;2pkt 2fpkt"];
12319--17346[label="1;2pkt 2fpkt"];
15475--17346[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.73.110" dst_port="3330" src_ip="164.50.97.179" src_port="80"/>
      <filter dst_ip="145.105.73.110" dst_port="3328" src_ip="164.50.97.179" src_port="80"/>
    </slice>
    <from sec="1284009076" usec="0"/>
    <to sec="1284009085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.72.226.179"/>
    </slice>
    <from sec="1284008856" usec="0"/>
    <to sec="1284008870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1442{
style=filled;
color=gray75;
12326[label="69.34.25.180;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15480[label="69.34.25.180;6pkt 6fpkt", shape=invtriangle, color=brown];
17349[label="69.34.25.180;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1442[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.34.25.180:*, 167.190.180.100:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2494: (8.33333%)&lt;BR/&gt; 2492: (8.33333%)&lt;BR/&gt; 2491: (8.33333%)&lt;BR/&gt; 2488: (8.33333%)&gt;];
}
12326--15480[label="1;6pkt 6fpkt"];
12326--17349[label="1;6pkt 6fpkt"];
15480--17349[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.100" dst_port="80" src_ip="69.34.25.180"/>
    </slice>
    <from sec="1284009233" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.225.254.180"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1444{
style=filled;
color=gray75;
12349[label="26.40.106.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15493[label="26.40.106.181;3pkt 3fpkt", shape=invtriangle, color=brown];
17358[label="26.40.106.181;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1444[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.40.106.181:38254, 199.56.56.145:80}[33.3333%]&lt;BR/&gt;{26.40.106.181:41940, 199.56.56.145:80}[33.3333%]&lt;BR/&gt;{26.40.106.181:55336, 199.56.56.145:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55336: (16.6667%)&lt;BR/&gt; 41940: (16.6667%)&lt;BR/&gt; 38254: (16.6667%)&gt;];
}
12349--15493[label="1;3pkt 3fpkt"];
12349--17358[label="1;3pkt 3fpkt"];
15493--17358[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.145" dst_port="80" src_ip="26.40.106.181" src_port="55336"/>
      <filter dst_ip="199.56.56.145" dst_port="80" src_ip="26.40.106.181" src_port="41940"/>
      <filter dst_ip="199.56.56.145" dst_port="80" src_ip="26.40.106.181" src_port="38254"/>
    </slice>
    <from sec="1284009269" usec="0"/>
    <to sec="1284009273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1445{
style=filled;
color=gray75;
12352[label="29.136.148.181;21pkt 21fpkt", shape=pentagon, color=darkviolet];
15495[label="29.136.148.181;21pkt 21fpkt", shape=invtriangle, color=brown];
17359[label="29.136.148.181;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1445[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.136.148.181:*, 199.56.53.107:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16384: (2.38095%)&lt;BR/&gt; 16354: (2.38095%)&lt;BR/&gt; 16353: (2.38095%)&lt;BR/&gt; 16352: (2.38095%)&gt;];
}
12352--15495[label="1;21pkt 21fpkt"];
12352--17359[label="1;21pkt 21fpkt"];
15495--17359[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.53.107" dst_port="80" src_ip="29.136.148.181"/>
    </slice>
    <from sec="1284009283" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.783882,2.45273,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1446{
style=filled;
color=gray75;
2820[label="148.36.71.55;s;68pkt 68fpkt", shape=diamond, color=yellow];
10002[label="148.36.71.55;74pkt 74fpkt", shape=pentagon, color=darkviolet];
14101[label="148.36.71.55;74pkt 74fpkt", shape=invtriangle, color=brown];
stat1446[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.36.71.55:45152, *:*}[89.1892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45152: (45.1389%)&lt;BR/&gt; 80: (3.7037%)&lt;BR/&gt; 64148: (0.694444%)&lt;BR/&gt; 62043: (0.694444%)&lt;BR/&gt; 61981: (0.694444%)&gt;];
}
2820--2964[label="0.0294118;2pkt 2fpkt"];
2820--10002[label="1;68pkt 68fpkt"];
2820--14101[label="1;68pkt 68fpkt"];
10002--14101[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter src_ip="148.36.71.55" src_port="45152"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1447{
style=filled;
color=gray75;
12360[label="173.251.240.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15500[label="173.251.240.181;1pkt 1fpkt", shape=invtriangle, color=brown];
17361[label="173.251.240.181;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1447[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.251.240.181:80, 148.36.152.6:3358}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3358: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12360--15500[label="1;1pkt 1fpkt"];
12360--17361[label="1;1pkt 1fpkt"];
15500--17361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.36.152.6" dst_port="3358" src_ip="173.251.240.181" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.241.58.182"/>
    </slice>
    <from sec="1284008797" usec="0"/>
    <to sec="1284008813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.210.201.183"/>
    </slice>
    <from sec="1284008494" usec="0"/>
    <to sec="1284008507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1450{
style=filled;
color=gray75;
12399[label="208.56.209.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15518[label="208.56.209.184;1pkt 1fpkt", shape=invtriangle, color=brown];
17370[label="208.56.209.184;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1450[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.56.209.184:80, 167.190.199.19:52607}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52607: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12399--15518[label="1;1pkt 1fpkt"];
12399--17370[label="1;1pkt 1fpkt"];
15518--17370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.199.19" dst_port="52607" src_ip="208.56.209.184" src_port="80"/>
    </slice>
    <from sec="1284009067" usec="0"/>
    <to sec="1284009077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.160.214.184"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1452{
style=filled;
color=gray75;
12401[label="188.156.249.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15520[label="188.156.249.184;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1452[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.156.249.184:53954, 198.45.152.173:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53954: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12401--15520[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.45.152.173" dst_port="80" src_ip="188.156.249.184" src_port="53954"/>
    </slice>
    <from sec="1284009262" usec="0"/>
    <to sec="1284009277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1453{
style=filled;
color=gray75;
6142[label="61.116.109.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
6208[label="199.56.40.49;d;93pkt 93fpkt", shape=diamond, color=yellow];
12410[label="169.171.108.185;7pkt 7fpkt", shape=pentagon, color=darkviolet];
15526[label="169.171.108.185;7pkt 7fpkt", shape=invtriangle, color=brown];
17374[label="169.171.108.185;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1453[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.56.40.49:29615}[56.9892%]&lt;BR/&gt;{*:80, 199.56.40.49:*}[39.7849%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.6522%)&lt;BR/&gt; 29615: (23.0435%)&lt;BR/&gt; 60132: (1.73913%)&lt;BR/&gt; 60121: (1.73913%)&lt;BR/&gt; 60120: (1.73913%)&gt;];
}
6142--6208[label="1;1pkt 1fpkt"];
6208--8895[label="0.0107527;1pkt 1fpkt"];
6208--12410[label="1;7pkt 7fpkt"];
6208--15526[label="1;7pkt 7fpkt"];
6208--17374[label="1;7pkt 7fpkt"];
12410--15526[label="1;7pkt 7fpkt"];
12410--17374[label="1;7pkt 7fpkt"];
15526--17374[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.40.49" src_port="80"/>
      <filter dst_ip="199.56.40.49" dst_port="29615"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.22.250.186"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.77.49.188"/>
    </slice>
    <from sec="1284008978" usec="0"/>
    <to sec="1284009062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1456{
style=filled;
color=gray75;
3642[label="167.190.225.199;d;32pkt 32fpkt", shape=diamond, color=yellow];
5456[label="209.160.67.188;s;12pkt 12fpkt", shape=diamond, color=yellow];
12464[label="209.160.67.188;13pkt 13fpkt", shape=pentagon, color=darkviolet];
15549[label="209.160.67.188;13pkt 13fpkt", shape=invtriangle, color=brown];
17384[label="209.160.67.188;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1456[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.13.118.96:*, 167.190.225.199:80}[39.0244%]&lt;BR/&gt;{209.160.67.188:*, *:80}[31.7073%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54749: (3.01205%)&lt;BR/&gt; 53626: (3.01205%)&lt;BR/&gt; 48890: (3.01205%)&lt;BR/&gt; 37378: (3.01205%)&gt;];
}
3642--5456[label="0.333333;4pkt 4fpkt"];
3642--8884[label="0.0625;2pkt 2fpkt"];
3642--8894[label="0.0625;2pkt 2fpkt"];
3642--8902[label="0.03125;1pkt 1fpkt"];
3642--8909[label="0.03125;1pkt 1fpkt"];
3642--12464[label="0.307692;4pkt 4fpkt"];
3642--15549[label="0.307692;4pkt 4fpkt"];
3642--17384[label="0.307692;4pkt 4fpkt"];
5456--8884[label="0.0833333;1pkt 1fpkt"];
5456--8909[label="0.0833333;1pkt 1fpkt"];
5456--12464[label="1;12pkt 12fpkt"];
5456--15549[label="1;12pkt 12fpkt"];
5456--17384[label="1;12pkt 12fpkt"];
12464--15549[label="1;13pkt 13fpkt"];
12464--17384[label="1;13pkt 13fpkt"];
15549--17384[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.160.67.188"/>
      <filter dst_ip="167.190.225.199" dst_port="80" src_ip="32.13.118.96"/>
    </slice>
    <from sec="1284008418" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1457{
style=filled;
color=gray75;
12470[label="145.105.138.188;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15552[label="145.105.138.188;1pkt 1fpkt", shape=invtriangle, color=brown];
17386[label="145.105.138.188;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1457[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.138.188:55474, 144.40.189.6:7024}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55474: (50%)&lt;BR/&gt; 7024: (50%)&gt;];
}
12470--15552[label="1;1pkt 1fpkt"];
12470--17386[label="1;1pkt 1fpkt"];
15552--17386[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.40.189.6" dst_port="7024" src_ip="145.105.138.188" src_port="55474"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.161.201.188"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1459{
style=filled;
color=gray75;
12504[label="216.4.138.190;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15575[label="216.4.138.190;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1459[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.4.138.190:*, 167.190.180.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49717: (8.33333%)&lt;BR/&gt; 49716: (8.33333%)&lt;BR/&gt; 49715: (8.33333%)&lt;BR/&gt; 49714: (8.33333%)&gt;];
}
12504--15575[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="216.4.138.190"/>
    </slice>
    <from sec="1284009249" usec="0"/>
    <to sec="1284009263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.73.26.191"/>
    </slice>
    <from sec="1284008958" usec="0"/>
    <to sec="1284008994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.48.47.192"/>
    </slice>
    <from sec="1284009053" usec="0"/>
    <to sec="1284009080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1462{
style=filled;
color=gray75;
2991[label="199.56.54.64;d;5pkt 5fpkt", shape=diamond, color=yellow];
4065[label="199.56.54.16;d;124pkt 124fpkt", shape=diamond, color=yellow];
5554[label="118.80.198.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
6092[label="33.73.177.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
9569[label="47.75.130.32;17pkt 17fpkt", shape=pentagon, color=darkviolet];
11105[label="33.73.177.112;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12500[label="209.160.67.190;11pkt 11fpkt", shape=pentagon, color=darkviolet];
12533[label="32.13.119.192;36pkt 36fpkt", shape=pentagon, color=darkviolet];
15573[label="209.160.67.190;11pkt 11fpkt", shape=invtriangle, color=brown];
15594[label="32.13.119.192;36pkt 36fpkt", shape=invtriangle, color=brown];
17398[label="209.160.67.190;11pkt 11fpkt", shape=invhouse, color=bisque];
17414[label="32.13.119.192;36pkt 36fpkt", shape=invhouse, color=bisque];
stat1462[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.56.54.16:53}[40.2516%]&lt;BR/&gt;{32.13.119.192:*, 199.56.54.16:80}[22.0126%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.5238%)&lt;BR/&gt; 53: (11.3946%)&lt;BR/&gt; 25: (3.23129%)&lt;BR/&gt; 60245: (0.680272%)&lt;BR/&gt; 60204: (0.680272%)&gt;];
}
2991--6092[label="1;2pkt 2fpkt"];
2991--8909[label="0.4;2pkt 2fpkt"];
2991--11105[label="0.5;2pkt 2fpkt"];
2991--12500[label="0.4;2pkt 2fpkt"];
2991--15573[label="0.4;2pkt 2fpkt"];
2991--17398[label="0.4;2pkt 2fpkt"];
4065--5554[label="1;1pkt 1fpkt"];
4065--8883[label="0.0483871;6pkt 6fpkt"];
4065--8884[label="0.0403226;5pkt 5fpkt"];
4065--8893[label="0.0564516;7pkt 7fpkt"];
4065--8894[label="0.0322581;4pkt 4fpkt"];
4065--8901[label="0.00806452;1pkt 1fpkt"];
4065--8902[label="0.00806452;1pkt 1fpkt"];
4065--8908[label="0.00806452;1pkt 1fpkt"];
4065--9569[label="0.705882;12pkt 12fpkt"];
4065--12500[label="0.181818;2pkt 2fpkt"];
4065--12533[label="0.555556;20pkt 20fpkt"];
4065--13129[label="0.00806452;1pkt 1fpkt"];
4065--15573[label="0.181818;2pkt 2fpkt"];
4065--15594[label="0.555556;20pkt 20fpkt"];
4065--17398[label="0.181818;2pkt 2fpkt"];
4065--17414[label="0.555556;20pkt 20fpkt"];
6092--8909[label="0.5;1pkt 1fpkt"];
6092--11105[label="1;2pkt 2fpkt"];
12500--15573[label="1;11pkt 11fpkt"];
12500--17398[label="1;11pkt 11fpkt"];
12533--15594[label="1;36pkt 36fpkt"];
12533--17414[label="1;36pkt 36fpkt"];
15573--17398[label="1;11pkt 11fpkt"];
15594--17414[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.54.16" dst_port="53"/>
      <filter dst_ip="199.56.54.16" dst_port="80" src_ip="32.13.119.192"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.148.145.192"/>
    </slice>
    <from sec="1284008753" usec="0"/>
    <to sec="1284008848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.166.203.192"/>
    </slice>
    <from sec="1284008425" usec="0"/>
    <to sec="1284009292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1465{
style=filled;
color=gray75;
12551[label="29.43.212.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15604[label="29.43.212.193;1pkt 1fpkt", shape=invtriangle, color=brown];
17422[label="29.43.212.193;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1465[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.43.212.193:1466, 199.56.52.97:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1466: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12551--15604[label="1;1pkt 1fpkt"];
12551--17422[label="1;1pkt 1fpkt"];
15604--17422[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.97" dst_port="80" src_ip="29.43.212.193" src_port="1466"/>
    </slice>
    <from sec="1284008609" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1466{
style=filled;
color=gray75;
12558[label="198.32.104.194;19pkt 19fpkt", shape=pentagon, color=darkviolet];
15607[label="198.32.104.194;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1466[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.32.104.194:80, 21.225.36.216:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33540: (2.63158%)&lt;BR/&gt; 33536: (2.63158%)&lt;BR/&gt; 33020: (2.63158%)&lt;BR/&gt; 33008: (2.63158%)&gt;];
}
12558--15607[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="21.225.36.216" src_ip="198.32.104.194" src_port="80"/>
    </slice>
    <from sec="1284008976" usec="0"/>
    <to sec="1284009181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
12566[label="131.60.35.195;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15611[label="131.60.35.195;2pkt 2fpkt", shape=invtriangle, color=brown];
17426[label="131.60.35.195;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.35.195:80, 198.152.198.192:9882}[50%]&lt;BR/&gt;{131.60.35.195:80, 198.152.198.192:28184}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28184: (25%)&lt;BR/&gt; 9882: (25%)&gt;];
}
12566--15611[label="1;2pkt 2fpkt"];
12566--17426[label="1;2pkt 2fpkt"];
15611--17426[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.152.198.192" dst_port="28184" src_ip="131.60.35.195" src_port="80"/>
      <filter dst_ip="198.152.198.192" dst_port="9882" src_ip="131.60.35.195" src_port="80"/>
    </slice>
    <from sec="1284009121" usec="0"/>
    <to sec="1284009145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.124.58.195"/>
    </slice>
    <from sec="1284009274" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1469{
style=filled;
color=gray75;
2628[label="167.190.202.145;s;278pkt 278fpkt", shape=diamond, color=yellow];
3495[label="155.137.18.238;d;160pkt 160fpkt", shape=diamond, color=yellow];
3907[label="155.137.8.74;d;275pkt 275fpkt", shape=diamond, color=yellow];
7772[label="155.137.8.74;d;156pkt 156fpkt", shape=hexagon, color=black];
11675[label="167.190.202.145;335pkt 335fpkt", shape=pentagon, color=darkviolet];
12586[label="167.190.9.196;33pkt 33fpkt", shape=pentagon, color=darkviolet];
15083[label="167.190.202.145;335pkt 335fpkt", shape=invtriangle, color=brown];
15625[label="167.190.9.196;33pkt 33fpkt", shape=invtriangle, color=brown];
17123[label="167.190.202.145;335pkt 335fpkt", shape=invhouse, color=bisque];
stat1469[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.202.145:*, 155.137.8.74:80}[45.679%]&lt;BR/&gt;{167.190.202.145:*, 155.137.18.238:80}[21.6049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.201%)&lt;BR/&gt; 53368: (0.695876%)&lt;BR/&gt; 62446: (0.231959%)&lt;BR/&gt; 62215: (0.206186%)&lt;BR/&gt; 443: (0.206186%)&gt;];
}
2628--3495[label="0.65625;105pkt 105fpkt"];
2628--3907[label="0.603636;166pkt 166fpkt"];
2628--7772[label="0.692308;108pkt 108fpkt"];
2628--8884[label="0.0503597;14pkt 14fpkt"];
2628--8894[label="0.0647482;18pkt 18fpkt"];
2628--8902[label="0.0647482;18pkt 18fpkt"];
2628--8909[label="0.057554;16pkt 16fpkt"];
2628--11675[label="1;278pkt 278fpkt"];
2628--15083[label="1;278pkt 278fpkt"];
2628--17123[label="1;278pkt 278fpkt"];
3495--4173[label="0.00775194;1pkt 1fpkt"];
3495--5306[label="0.0125;2pkt 2fpkt"];
3495--5491[label="0.0246914;2pkt 2fpkt"];
3495--5787[label="0.03125;5pkt 5fpkt"];
3495--6100[label="0.025;4pkt 4fpkt"];
3495--7622[label="0.00735294;1pkt 1fpkt"];
3495--8884[label="0.01875;3pkt 3fpkt"];
3495--8894[label="0.1125;18pkt 18fpkt"];
3495--8902[label="0.0125;2pkt 2fpkt"];
3495--8909[label="0.0375;6pkt 6fpkt"];
3495--9325[label="0.04375;7pkt 7fpkt"];
3495--10963[label="0.0125;2pkt 2fpkt"];
3495--11675[label="0.65625;105pkt 105fpkt"];
3495--11709[label="0.0654206;7pkt 7fpkt"];
3495--11887[label="0.00625;1pkt 1fpkt"];
3495--11967[label="0.00625;1pkt 1fpkt"];
3495--12511[label="0.00735294;1pkt 1fpkt"];
3495--12605[label="0.03125;5pkt 5fpkt"];
3495--14670[label="0.0125;2pkt 2fpkt"];
3495--15083[label="0.65625;105pkt 105fpkt"];
3495--15105[label="0.0654206;7pkt 7fpkt"];
3495--15214[label="0.00625;1pkt 1fpkt"];
3495--15264[label="0.00625;1pkt 1fpkt"];
3495--15637[label="0.03125;5pkt 5fpkt"];
3495--16886[label="0.0125;2pkt 2fpkt"];
3495--17123[label="0.65625;105pkt 105fpkt"];
3907--4094[label="0.0545455;9pkt 9fpkt"];
3907--4205[label="0.0379747;3pkt 3fpkt"];
3907--4280[label="0.032967;3pkt 3fpkt"];
3907--5787[label="0.00925926;2pkt 2fpkt"];
3907--5950[label="0.010929;2pkt 2fpkt"];
3907--6026[label="0.0344828;2pkt 2fpkt"];
3907--6389[label="0.0285714;3pkt 3fpkt"];
3907--7622[label="0.00735294;1pkt 1fpkt"];
3907--7772[label="1;156pkt 156fpkt"];
3907--8884[label="0.0618182;17pkt 17fpkt"];
3907--8894[label="0.0290909;8pkt 8fpkt"];
3907--8902[label="0.101818;28pkt 28fpkt"];
3907--8909[label="0.0690909;19pkt 19fpkt"];
3907--9133[label="0.0535714;3pkt 3fpkt"];
3907--10470[label="0.0218182;6pkt 6fpkt"];
3907--10825[label="0.0517241;9pkt 9fpkt"];
3907--10963[label="0.00363636;1pkt 1fpkt"];
3907--11675[label="0.72;198pkt 198fpkt"];
3907--11744[label="0.0326087;3pkt 3fpkt"];
3907--11967[label="0.00363636;1pkt 1fpkt"];
3907--12586[label="0.424242;14pkt 14fpkt"];
3907--12605[label="0.00851064;2pkt 2fpkt"];
3907--13005[label="0.025641;3pkt 3fpkt"];
3907--14374[label="0.0218182;6pkt 6fpkt"];
3907--14581[label="0.0517241;9pkt 9fpkt"];
3907--14670[label="0.00363636;1pkt 1fpkt"];
3907--15083[label="0.72;198pkt 198fpkt"];
3907--15129[label="0.0326087;3pkt 3fpkt"];
3907--15264[label="0.00363636;1pkt 1fpkt"];
3907--15625[label="0.424242;14pkt 14fpkt"];
3907--15637[label="0.00851064;2pkt 2fpkt"];
3907--15862[label="0.025641;3pkt 3fpkt"];
3907--16707[label="0.0218182;6pkt 6fpkt"];
3907--16886[label="0.00363636;1pkt 1fpkt"];
3907--17123[label="0.72;198pkt 198fpkt"];
3907--17572[label="0.025641;3pkt 3fpkt"];
7772--8884[label="0.108974;17pkt 17fpkt"];
7772--8894[label="0.0512821;8pkt 8fpkt"];
7772--9133[label="0.0535714;3pkt 3fpkt"];
7772--10825[label="0.0576923;9pkt 9fpkt"];
7772--10963[label="0.00641026;1pkt 1fpkt"];
7772--11675[label="0.692308;108pkt 108fpkt"];
7772--11744[label="0.0326087;3pkt 3fpkt"];
7772--12586[label="0.212121;7pkt 7fpkt"];
7772--12605[label="0.0128205;2pkt 2fpkt"];
7772--14581[label="0.0576923;9pkt 9fpkt"];
7772--14670[label="0.00641026;1pkt 1fpkt"];
7772--15083[label="0.692308;108pkt 108fpkt"];
7772--15129[label="0.0326087;3pkt 3fpkt"];
7772--15625[label="0.212121;7pkt 7fpkt"];
7772--15637[label="0.0128205;2pkt 2fpkt"];
7772--16886[label="0.00641026;1pkt 1fpkt"];
7772--17123[label="0.692308;108pkt 108fpkt"];
11675--15083[label="1;335pkt 335fpkt"];
11675--17123[label="1;335pkt 335fpkt"];
12586--15625[label="1;33pkt 33fpkt"];
15083--17123[label="1;335pkt 335fpkt"];
</description>
    <slice>
      <filter dst_ip="155.137.8.74" dst_port="80" src_ip="167.190.202.145"/>
      <filter dst_ip="155.137.18.238" dst_port="80" src_ip="167.190.202.145"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.162.84.196"/>
    </slice>
    <from sec="1284008976" usec="0"/>
    <to sec="1284009025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.243.208.196"/>
    </slice>
    <from sec="1284008738" usec="0"/>
    <to sec="1284008749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1472{
style=filled;
color=gray75;
12606[label="167.190.217.196;57pkt 57fpkt", shape=pentagon, color=darkviolet];
15638[label="167.190.217.196;57pkt 57fpkt", shape=invtriangle, color=brown];
17442[label="167.190.217.196;57pkt 57fpkt", shape=invhouse, color=bisque];
stat1472[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.217.196:*, 40.44.150.17:80}[35.0877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50974: (0.877193%)&lt;BR/&gt; 50973: (0.877193%)&lt;BR/&gt; 50972: (0.877193%)&lt;BR/&gt; 50971: (0.877193%)&gt;];
}
12606--15638[label="1;57pkt 57fpkt"];
12606--17442[label="1;57pkt 57fpkt"];
15638--17442[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="40.44.150.17" dst_port="80" src_ip="167.190.217.196"/>
    </slice>
    <from sec="1284009267" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.43.248.196"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.147.58.197"/>
    </slice>
    <from sec="1284008718" usec="0"/>
    <to sec="1284008723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1475{
style=filled;
color=gray75;
12628[label="8.238.145.197;33pkt 33fpkt", shape=pentagon, color=darkviolet];
15651[label="8.238.145.197;33pkt 33fpkt", shape=invtriangle, color=brown];
17451[label="8.238.145.197;33pkt 33fpkt", shape=invhouse, color=bisque];
stat1475[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.238.145.197:80, 198.32.104.161:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51478: (1.51515%)&lt;BR/&gt; 51360: (1.51515%)&lt;BR/&gt; 51347: (1.51515%)&lt;BR/&gt; 51112: (1.51515%)&gt;];
}
12628--15651[label="1;33pkt 33fpkt"];
12628--17451[label="1;33pkt 33fpkt"];
15651--17451[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.104.161" src_ip="8.238.145.197" src_port="80"/>
    </slice>
    <from sec="1284009075" usec="0"/>
    <to sec="1284009190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.95.166.197"/>
    </slice>
    <from sec="1284009110" usec="0"/>
    <to sec="1284009117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1477{
style=filled;
color=gray75;
12640[label="218.17.150.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15659[label="218.17.150.198;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1477[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.17.150.198:4357, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4357: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12640--15659[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="218.17.150.198" src_port="4357"/>
    </slice>
    <from sec="1284009166" usec="0"/>
    <to sec="1284009188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.49.83.199"/>
    </slice>
    <from sec="1284008725" usec="0"/>
    <to sec="1284008734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1479{
style=filled;
color=gray75;
12651[label="9.43.98.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15664[label="9.43.98.199;1pkt 1fpkt", shape=invtriangle, color=brown];
17460[label="9.43.98.199;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1479[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.43.98.199:1194, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1194: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12651--15664[label="1;1pkt 1fpkt"];
12651--17460[label="1;1pkt 1fpkt"];
15664--17460[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="9.43.98.199" src_port="1194"/>
    </slice>
    <from sec="1284009267" usec="0"/>
    <to sec="1284009276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1480{
style=filled;
color=gray75;
12672[label="198.45.150.200;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15677[label="198.45.150.200;5pkt 5fpkt", shape=invtriangle, color=brown];
17464[label="198.45.150.200;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1480[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.45.150.200:52060, 40.35.220.171:995}[20%]&lt;BR/&gt;{198.45.150.200:52056, 39.160.214.184:80}[20%]&lt;BR/&gt;{198.45.150.200:52057, 39.160.214.184:80}[20%]&lt;BR/&gt;{198.45.150.200:52058, 39.160.214.184:80}[20%]&lt;BR/&gt;{198.45.150.200:52061, 39.160.214.184:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 52061: (10%)&lt;BR/&gt; 52060: (10%)&lt;BR/&gt; 52058: (10%)&lt;BR/&gt; 52057: (10%)&gt;];
}
12672--15677[label="1;5pkt 5fpkt"];
12672--17464[label="1;5pkt 5fpkt"];
15677--17464[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="39.160.214.184" dst_port="80" src_ip="198.45.150.200" src_port="52061"/>
      <filter dst_ip="39.160.214.184" dst_port="80" src_ip="198.45.150.200" src_port="52058"/>
      <filter dst_ip="39.160.214.184" dst_port="80" src_ip="198.45.150.200" src_port="52057"/>
      <filter dst_ip="39.160.214.184" dst_port="80" src_ip="198.45.150.200" src_port="52056"/>
      <filter dst_ip="40.35.220.171" dst_port="995" src_ip="198.45.150.200" src_port="52060"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.173.189.200"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1482{
style=filled;
color=gray75;
12695[label="29.105.168.202;18pkt 18fpkt", shape=pentagon, color=darkviolet];
15689[label="29.105.168.202;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1482[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.105.168.202:80, 164.12.157.134:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55723: (2.77778%)&lt;BR/&gt; 55628: (2.77778%)&lt;BR/&gt; 55572: (2.77778%)&lt;BR/&gt; 24359: (2.77778%)&gt;];
}
12695--15689[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="164.12.157.134" src_ip="29.105.168.202" src_port="80"/>
    </slice>
    <from sec="1284008948" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.38.102.206"/>
    </slice>
    <from sec="1284008525" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1484{
style=filled;
color=gray75;
12784[label="28.70.216.207;21pkt 21fpkt", shape=pentagon, color=darkviolet];
15738[label="28.70.216.207;21pkt 21fpkt", shape=invtriangle, color=brown];
stat1484[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.70.216.207:*, 167.190.180.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2635: (2.38095%)&lt;BR/&gt; 2634: (2.38095%)&lt;BR/&gt; 2633: (2.38095%)&lt;BR/&gt; 2632: (2.38095%)&gt;];
}
12784--15738[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.28" dst_port="80" src_ip="28.70.216.207"/>
    </slice>
    <from sec="1284009191" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1485{
style=filled;
color=gray75;
12793[label="198.232.80.208;47pkt 47fpkt", shape=pentagon, color=darkviolet];
15742[label="198.232.80.208;47pkt 47fpkt", shape=invtriangle, color=brown];
17492[label="198.232.80.208;47pkt 47fpkt", shape=invhouse, color=bisque];
stat1485[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.232.80.208:443, 167.190.112.97:*}[97.8723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.9362%)&lt;BR/&gt; 1243: (1.06383%)&lt;BR/&gt; 1242: (1.06383%)&lt;BR/&gt; 1241: (1.06383%)&lt;BR/&gt; 1240: (1.06383%)&gt;];
}
12793--15742[label="1;47pkt 47fpkt"];
12793--17492[label="1;47pkt 47fpkt"];
15742--17492[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.112.97" src_ip="198.232.80.208" src_port="443"/>
    </slice>
    <from sec="1284009297" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1486{
style=filled;
color=gray75;
12813[label="57.209.39.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15754[label="57.209.39.209;1pkt 1fpkt", shape=invtriangle, color=brown];
17500[label="57.209.39.209;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1486[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.209.39.209:34317, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34317: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12813--15754[label="1;1pkt 1fpkt"];
12813--17500[label="1;1pkt 1fpkt"];
15754--17500[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="57.209.39.209" src_port="34317"/>
    </slice>
    <from sec="1284008491" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.119.140.209"/>
    </slice>
    <from sec="1284009151" usec="0"/>
    <to sec="1284009194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.177.162.209"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1489{
style=filled;
color=gray75;
12827[label="61.67.214.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15764[label="61.67.214.209;1pkt 1fpkt", shape=invtriangle, color=brown];
17507[label="61.67.214.209;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1489[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.67.214.209:1138, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1138: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12827--15764[label="1;1pkt 1fpkt"];
12827--17507[label="1;1pkt 1fpkt"];
15764--17507[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="61.67.214.209" src_port="1138"/>
    </slice>
    <from sec="1284009265" usec="0"/>
    <to sec="1284009275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25253,2.41298,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1490{
style=filled;
color=gray75;
727[label="167.190.109.89;d;71pkt 71fpkt", shape=diamond, color=yellow];
729[label="22.205.9.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
3741[label="192.62.177.163;s;17pkt 17fpkt", shape=diamond, color=yellow];
4400[label="199.98.247.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
6684[label="167.190.109.89;d;1pkt 1fpkt", shape=hexagon, color=black];
12013[label="200.197.36.163;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12125[label="22.205.9.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12844[label="208.2.229.210;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15356[label="22.205.9.169;1pkt 1fpkt", shape=invtriangle, color=brown];
15774[label="208.2.229.210;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1490[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.62.177.163:80, 167.190.109.89:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6852%)&lt;BR/&gt; 55553: (2.31481%)&lt;BR/&gt; 1038: (2.31481%)&lt;BR/&gt; 1605: (1.38889%)&lt;BR/&gt; 1583: (1.38889%)&gt;];
}
727--729[label="1;1pkt 1fpkt"];
727--2647[label="0.037037;2pkt 2fpkt"];
727--2878[label="0.212121;7pkt 7fpkt"];
727--3741[label="0.941176;16pkt 16fpkt"];
727--4400[label="1;2pkt 2fpkt"];
727--6684[label="1;1pkt 1fpkt"];
727--7657[label="0.291667;7pkt 7fpkt"];
727--12013[label="1;8pkt 8fpkt"];
727--12125[label="1;1pkt 1fpkt"];
727--12844[label="1;3pkt 3fpkt"];
727--12932[label="0.0322581;2pkt 2fpkt"];
727--15356[label="1;1pkt 1fpkt"];
727--15774[label="1;3pkt 3fpkt"];
729--6684[label="1;1pkt 1fpkt"];
729--12125[label="1;1pkt 1fpkt"];
729--15356[label="1;1pkt 1fpkt"];
6684--12125[label="1;1pkt 1fpkt"];
6684--15356[label="1;1pkt 1fpkt"];
12125--15356[label="1;1pkt 1fpkt"];
12844--15774[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.109.89" src_ip="192.62.177.163" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1491{
style=filled;
color=gray75;
12845[label="131.60.234.210;53pkt 53fpkt", shape=pentagon, color=darkviolet];
15775[label="131.60.234.210;53pkt 53fpkt", shape=invtriangle, color=brown];
17512[label="131.60.234.210;53pkt 53fpkt", shape=invhouse, color=bisque];
stat1491[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.234.210:13501, *:*}[52.8302%]&lt;BR/&gt;{131.60.234.210:16001, *:*}[30.1887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13501: (26.4151%)&lt;BR/&gt; 16001: (15.0943%)&lt;BR/&gt; 19978: (1.88679%)&lt;BR/&gt; 63471: (0.943396%)&lt;BR/&gt; 62610: (0.943396%)&gt;];
}
12845--15775[label="1;53pkt 53fpkt"];
12845--17512[label="1;53pkt 53fpkt"];
15775--17512[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="131.60.234.210" src_port="13501"/>
      <filter src_ip="131.60.234.210" src_port="16001"/>
    </slice>
    <from sec="1284008451" usec="0"/>
    <to sec="1284009232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1492{
style=filled;
color=gray75;
12849[label="218.40.32.211;179pkt 179fpkt", shape=pentagon, color=darkviolet];
15777[label="218.40.32.211;179pkt 179fpkt", shape=invtriangle, color=brown];
stat1492[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.40.32.211:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65289: (0.27933%)&lt;BR/&gt; 65134: (0.27933%)&lt;BR/&gt; 65123: (0.27933%)&lt;BR/&gt; 63004: (0.27933%)&gt;];
}
12849--15777[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter src_ip="218.40.32.211" src_port="80"/>
    </slice>
    <from sec="1284008410" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1493{
style=filled;
color=gray75;
12851[label="148.175.33.211;41pkt 41fpkt", shape=pentagon, color=darkviolet];
15779[label="148.175.33.211;41pkt 41fpkt", shape=invtriangle, color=brown];
17514[label="148.175.33.211;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1493[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.175.33.211:*, 198.33.226.68:80}[85.3659%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49818: (1.21951%)&lt;BR/&gt; 49817: (1.21951%)&lt;BR/&gt; 49816: (1.21951%)&lt;BR/&gt; 49815: (1.21951%)&gt;];
}
12851--15779[label="1;41pkt 41fpkt"];
12851--17514[label="1;41pkt 41fpkt"];
15779--17514[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="198.33.226.68" dst_port="80" src_ip="148.175.33.211"/>
    </slice>
    <from sec="1284009223" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.90.40.211"/>
    </slice>
    <from sec="1284009145" usec="0"/>
    <to sec="1284009159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1495{
style=filled;
color=gray75;
12853[label="199.56.56.211;97pkt 97fpkt", shape=pentagon, color=darkviolet];
15781[label="199.56.56.211;97pkt 97fpkt", shape=invtriangle, color=brown];
stat1495[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.56.211:10785, *:*}[67.0103%]&lt;BR/&gt;{199.56.56.211:*, 8.236.192.46:80}[24.7423%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10785: (33.5052%)&lt;BR/&gt; 80: (13.9175%)&lt;BR/&gt; 3389: (1.03093%)&lt;BR/&gt; 0: (1.03093%)&lt;BR/&gt; 64166: (0.515464%)&gt;];
}
12853--15781[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="199.56.56.211" src_port="10785"/>
      <filter dst_ip="8.236.192.46" dst_port="80" src_ip="199.56.56.211"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.162.57.211"/>
    </slice>
    <from sec="1284008849" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.250.147.211"/>
    </slice>
    <from sec="1284008619" usec="0"/>
    <to sec="1284008676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.14.177.211"/>
    </slice>
    <from sec="1284008860" usec="0"/>
    <to sec="1284008870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1499{
style=filled;
color=gray75;
12871[label="17.140.249.211;213pkt 213fpkt", shape=pentagon, color=darkviolet];
15790[label="17.140.249.211;213pkt 213fpkt", shape=invtriangle, color=brown];
stat1499[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.140.249.211:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
12871--15790[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="17.140.249.211" src_port="5060"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1500{
style=filled;
color=gray75;
12884[label="148.52.59.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15799[label="148.52.59.213;1pkt 1fpkt", shape=invtriangle, color=brown];
17527[label="148.52.59.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1500[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.59.213:80, 33.73.177.80:37457}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37457: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12884--15799[label="1;1pkt 1fpkt"];
12884--17527[label="1;1pkt 1fpkt"];
15799--17527[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.177.80" dst_port="37457" src_ip="148.52.59.213" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1501{
style=filled;
color=gray75;
12895[label="217.34.133.214;122pkt 122fpkt", shape=pentagon, color=darkviolet];
15803[label="217.34.133.214;122pkt 122fpkt", shape=invtriangle, color=brown];
stat1501[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.34.133.214:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
12895--15803[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="217.34.133.214" src_port="5060"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.196.79.215"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1503{
style=filled;
color=gray75;
12928[label="203.211.102.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15814[label="203.211.102.216;1pkt 1fpkt", shape=invtriangle, color=brown];
17536[label="203.211.102.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1503[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.211.102.216:53, 10.241.145.100:4876}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4876: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
12928--15814[label="1;1pkt 1fpkt"];
12928--17536[label="1;1pkt 1fpkt"];
15814--17536[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="10.241.145.100" dst_port="4876" src_ip="203.211.102.216" src_port="53"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.35.147.216"/>
    </slice>
    <from sec="1284009022" usec="0"/>
    <to sec="1284009042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1505{
style=filled;
color=gray75;
12942[label="34.10.102.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15823[label="34.10.102.217;1pkt 1fpkt", shape=invtriangle, color=brown];
17545[label="34.10.102.217;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1505[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.10.102.217:80, 167.190.2.117:64696}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64696: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12942--15823[label="1;1pkt 1fpkt"];
12942--17545[label="1;1pkt 1fpkt"];
15823--17545[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.2.117" dst_port="64696" src_ip="34.10.102.217" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1506{
style=filled;
color=gray75;
12955[label="167.190.7.218;33pkt 33fpkt", shape=pentagon, color=darkviolet];
15832[label="167.190.7.218;33pkt 33fpkt", shape=invtriangle, color=brown];
17551[label="167.190.7.218;33pkt 33fpkt", shape=invhouse, color=bisque];
stat1506[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.190.7.218:*, 170.184.5.128:80}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53782: (1.51515%)&lt;BR/&gt; 53781: (1.51515%)&lt;BR/&gt; 53780: (1.51515%)&lt;BR/&gt; 53770: (1.51515%)&gt;];
}
12955--15832[label="1;33pkt 33fpkt"];
12955--17551[label="1;33pkt 33fpkt"];
15832--17551[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="170.184.5.128" dst_port="80" src_ip="167.190.7.218"/>
    </slice>
    <from sec="1284009123" usec="0"/>
    <to sec="1284009251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1507{
style=filled;
color=gray75;
12988[label="148.52.67.220;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15850[label="148.52.67.220;6pkt 6fpkt", shape=invtriangle, color=brown];
17565[label="148.52.67.220;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1507[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.67.220:0, *:0}[50%]&lt;BR/&gt;{148.52.67.220:*, 27.41.6.84:12889}[33.3333%]&lt;BR/&gt;{148.52.67.220:*, 64.138.66.159:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 12889: (16.6667%)&lt;BR/&gt; 10359: (8.33333%)&lt;BR/&gt; 1698: (8.33333%)&lt;BR/&gt; 1673: (8.33333%)&gt;];
}
12988--15850[label="1;6pkt 6fpkt"];
12988--17565[label="1;6pkt 6fpkt"];
15850--17565[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="64.138.66.159" src_ip="148.52.67.220"/>
      <filter dst_ip="27.41.6.84" dst_port="12889" src_ip="148.52.67.220"/>
      <filter src_ip="148.52.67.220"/>
    </slice>
    <from sec="1284008424" usec="0"/>
    <to sec="1284009292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.16.74.220"/>
    </slice>
    <from sec="1284009002" usec="0"/>
    <to sec="1284009189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1509{
style=filled;
color=gray75;
12996[label="25.208.204.220;31pkt 31fpkt", shape=pentagon, color=darkviolet];
15856[label="25.208.204.220;31pkt 31fpkt", shape=invtriangle, color=brown];
17569[label="25.208.204.220;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1509[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.208.204.220:80, 167.190.28.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64523: (1.6129%)&lt;BR/&gt; 64522: (1.6129%)&lt;BR/&gt; 64521: (1.6129%)&lt;BR/&gt; 64520: (1.6129%)&gt;];
}
12996--15856[label="1;31pkt 31fpkt"];
12996--17569[label="1;31pkt 31fpkt"];
15856--17569[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.28.25" src_ip="25.208.204.220" src_port="80"/>
    </slice>
    <from sec="1284009275" usec="0"/>
    <to sec="1284009283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1510{
style=filled;
color=gray75;
13023[label="131.60.226.222;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15870[label="131.60.226.222;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1510[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.226.222:57871, 198.139.216.58:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57871: (50%)&lt;BR/&gt; 53274: (8.33333%)&lt;BR/&gt; 14965: (8.33333%)&lt;BR/&gt; 14074: (8.33333%)&lt;BR/&gt; 13528: (8.33333%)&gt;];
}
13023--15870[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="198.139.216.58" src_ip="131.60.226.222" src_port="57871"/>
    </slice>
    <from sec="1284008421" usec="0"/>
    <to sec="1284009290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1511{
style=filled;
color=gray75;
13024[label="21.191.230.222;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15871[label="21.191.230.222;3pkt 3fpkt", shape=invtriangle, color=brown];
17578[label="21.191.230.222;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1511[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.191.230.222:1572, 199.56.56.128:80}[33.3333%]&lt;BR/&gt;{21.191.230.222:1617, 199.56.56.128:80}[33.3333%]&lt;BR/&gt;{21.191.230.222:1897, 199.56.56.128:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1897: (16.6667%)&lt;BR/&gt; 1617: (16.6667%)&lt;BR/&gt; 1572: (16.6667%)&gt;];
}
13024--15871[label="1;3pkt 3fpkt"];
13024--17578[label="1;3pkt 3fpkt"];
15871--17578[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.56.128" dst_port="80" src_ip="21.191.230.222" src_port="1897"/>
      <filter dst_ip="199.56.56.128" dst_port="80" src_ip="21.191.230.222" src_port="1617"/>
      <filter dst_ip="199.56.56.128" dst_port="80" src_ip="21.191.230.222" src_port="1572"/>
    </slice>
    <from sec="1284009158" usec="0"/>
    <to sec="1284009245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.5.139.223"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1513{
style=filled;
color=gray75;
13057[label="180.25.202.224;14pkt 14fpkt", shape=pentagon, color=darkviolet];
15887[label="180.25.202.224;14pkt 14fpkt", shape=invtriangle, color=brown];
17586[label="180.25.202.224;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1513[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.25.202.224:*, 167.190.180.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3691: (3.57143%)&lt;BR/&gt; 3690: (3.57143%)&lt;BR/&gt; 3689: (3.57143%)&lt;BR/&gt; 3688: (3.57143%)&gt;];
}
13057--15887[label="1;14pkt 14fpkt"];
13057--17586[label="1;14pkt 14fpkt"];
15887--17586[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.28" dst_port="80" src_ip="180.25.202.224"/>
    </slice>
    <from sec="1284009157" usec="0"/>
    <to sec="1284009168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.26.229.224"/>
    </slice>
    <from sec="1284009190" usec="0"/>
    <to sec="1284009200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1515{
style=filled;
color=gray75;
13080[label="25.7.12.226;189pkt 189fpkt", shape=pentagon, color=darkviolet];
15899[label="25.7.12.226;189pkt 189fpkt", shape=invtriangle, color=brown];
17593[label="25.7.12.226;189pkt 189fpkt", shape=invhouse, color=bisque];
stat1515[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.7.12.226:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28683: (1.0582%)&lt;BR/&gt; 55931: (0.529101%)&lt;BR/&gt; 55911: (0.529101%)&lt;BR/&gt; 50826: (0.529101%)&gt;];
}
13080--15899[label="1;189pkt 189fpkt"];
13080--17593[label="1;189pkt 189fpkt"];
15899--17593[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter src_ip="25.7.12.226" src_port="80"/>
    </slice>
    <from sec="1284008507" usec="0"/>
    <to sec="1284008722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1516{
style=filled;
color=gray75;
226[label="198.32.66.155;d;742pkt 742fpkt", shape=diamond, color=yellow];
2266[label="40.225.0.163;s;326pkt 326fpkt", shape=diamond, color=yellow];
6300[label="199.56.40.23;d;18pkt 18fpkt", shape=diamond, color=yellow];
6578[label="198.32.66.155;d;314pkt 314fpkt", shape=hexagon, color=black];
10327[label="33.111.162.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10936[label="38.131.1.104;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11307[label="33.111.162.124;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11895[label="118.80.199.157;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12008[label="40.225.0.163;352pkt 352fpkt", shape=pentagon, color=darkviolet];
14287[label="33.111.162.72;2pkt 2fpkt", shape=invtriangle, color=brown];
14655[label="38.131.1.104;7pkt 7fpkt", shape=invtriangle, color=brown];
14868[label="33.111.162.124;2pkt 2fpkt", shape=invtriangle, color=brown];
15285[label="40.225.0.163;352pkt 352fpkt", shape=invtriangle, color=brown];
16653[label="33.111.162.72;2pkt 2fpkt", shape=invhouse, color=bisque];
16878[label="38.131.1.104;7pkt 7fpkt", shape=invhouse, color=bisque];
16998[label="33.111.162.124;2pkt 2fpkt", shape=invhouse, color=bisque];
17241[label="40.225.0.163;352pkt 352fpkt", shape=invhouse, color=bisque];
stat1516[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.225.0.163:443, 198.32.66.155:*}[34.8315%]&lt;BR/&gt;{*:53, 198.32.66.155:*}[25.4682%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (30.3571%)&lt;BR/&gt; 80: (9.7512%)&lt;BR/&gt; 53: (5.17657%)&lt;BR/&gt; 48684: (2.48796%)&lt;BR/&gt; 12953: (1.08347%)&gt;];
}
226--557[label="0.0234375;6pkt 6fpkt"];
226--1043[label="0.0208333;2pkt 2fpkt"];
226--1246[label="0.0102389;3pkt 3fpkt"];
226--1505[label="0.00134771;1pkt 1fpkt"];
226--1868[label="0.0188679;14pkt 14fpkt"];
226--1925[label="0.0227273;3pkt 3fpkt"];
226--2056[label="0.00539084;4pkt 4fpkt"];
226--2266[label="0.966258;315pkt 315fpkt"];
226--2692[label="0.0123457;1pkt 1fpkt"];
226--3406[label="0.00404313;3pkt 3fpkt"];
226--3439[label="0.00808625;6pkt 6fpkt"];
226--4650[label="0.00943396;7pkt 7fpkt"];
226--4668[label="0.00917431;1pkt 1fpkt"];
226--5822[label="0.0512821;2pkt 2fpkt"];
226--5934[label="0.0208333;1pkt 1fpkt"];
226--6244[label="0.0163934;1pkt 1fpkt"];
226--6578[label="1;314pkt 314fpkt"];
226--6839[label="0.00134771;1pkt 1fpkt"];
226--7645[label="0.00134771;1pkt 1fpkt"];
226--8829[label="0.00134771;1pkt 1fpkt"];
226--8914[label="0.00539084;4pkt 4fpkt"];
226--8918[label="0.00269542;2pkt 2fpkt"];
226--9843[label="0.010101;1pkt 1fpkt"];
226--10341[label="0.00323625;1pkt 1fpkt"];
226--10401[label="0.0208333;2pkt 2fpkt"];
226--10469[label="0.00539084;4pkt 4fpkt"];
226--10523[label="0.0909091;1pkt 1fpkt"];
226--10764[label="0.00134771;1pkt 1fpkt"];
226--11126[label="0.0186916;2pkt 2fpkt"];
226--11307[label="0.5;1pkt 1fpkt"];
226--11611[label="0.0258621;3pkt 3fpkt"];
226--11895[label="0.333333;1pkt 1fpkt"];
226--12008[label="0.894886;315pkt 315fpkt"];
226--12162[label="0.00668896;2pkt 2fpkt"];
226--12214[label="0.0204082;1pkt 1fpkt"];
226--12488[label="0.0833333;2pkt 2fpkt"];
226--12562[label="0.0465116;2pkt 2fpkt"];
226--13091[label="0.0215827;6pkt 6fpkt"];
226--14011[label="0.010101;1pkt 1fpkt"];
226--14298[label="0.00323625;1pkt 1fpkt"];
226--14333[label="0.0208333;2pkt 2fpkt"];
226--14399[label="0.0909091;1pkt 1fpkt"];
226--14545[label="0.00134771;1pkt 1fpkt"];
226--14765[label="0.0186916;2pkt 2fpkt"];
226--14868[label="0.5;1pkt 1fpkt"];
226--15039[label="0.0258621;3pkt 3fpkt"];
226--15285[label="0.894886;315pkt 315fpkt"];
226--15409[label="0.0204082;1pkt 1fpkt"];
226--15566[label="0.0833333;2pkt 2fpkt"];
226--15904[label="0.0215827;6pkt 6fpkt"];
226--16467[label="0.010101;1pkt 1fpkt"];
226--16657[label="0.00323625;1pkt 1fpkt"];
226--16681[label="0.0208333;2pkt 2fpkt"];
226--16722[label="0.0909091;1pkt 1fpkt"];
226--16814[label="0.00134771;1pkt 1fpkt"];
226--16944[label="0.0186916;2pkt 2fpkt"];
226--16998[label="0.5;1pkt 1fpkt"];
226--17241[label="0.894886;315pkt 315fpkt"];
226--17595[label="0.0215827;6pkt 6fpkt"];
2266--6578[label="0.375796;118pkt 118fpkt"];
2266--12008[label="1;326pkt 326fpkt"];
2266--15285[label="1;326pkt 326fpkt"];
2266--17241[label="1;326pkt 326fpkt"];
6300--8895[label="0.0555556;1pkt 1fpkt"];
6300--10327[label="1;2pkt 2fpkt"];
6300--10936[label="0.714286;5pkt 5fpkt"];
6300--11307[label="0.5;1pkt 1fpkt"];
6300--14287[label="1;2pkt 2fpkt"];
6300--14655[label="0.714286;5pkt 5fpkt"];
6300--14868[label="0.5;1pkt 1fpkt"];
6300--16653[label="1;2pkt 2fpkt"];
6300--16878[label="0.714286;5pkt 5fpkt"];
6300--16998[label="0.5;1pkt 1fpkt"];
6578--7645[label="0.00318471;1pkt 1fpkt"];
6578--8914[label="0.0127389;4pkt 4fpkt"];
6578--10401[label="0.0208333;2pkt 2fpkt"];
6578--10469[label="0.00318471;1pkt 1fpkt"];
6578--11895[label="0.333333;1pkt 1fpkt"];
6578--12008[label="0.375796;118pkt 118fpkt"];
6578--13091[label="0.00719424;2pkt 2fpkt"];
6578--14333[label="0.0208333;2pkt 2fpkt"];
6578--15285[label="0.375796;118pkt 118fpkt"];
6578--15904[label="0.00719424;2pkt 2fpkt"];
6578--16681[label="0.0208333;2pkt 2fpkt"];
6578--17241[label="0.375796;118pkt 118fpkt"];
6578--17595[label="0.00719424;2pkt 2fpkt"];
10327--14287[label="1;2pkt 2fpkt"];
10327--16653[label="1;2pkt 2fpkt"];
10936--14655[label="1;7pkt 7fpkt"];
10936--16878[label="1;7pkt 7fpkt"];
11307--14868[label="1;2pkt 2fpkt"];
11307--16998[label="1;2pkt 2fpkt"];
12008--15285[label="1;352pkt 352fpkt"];
12008--17241[label="1;352pkt 352fpkt"];
14287--16653[label="1;2pkt 2fpkt"];
14655--16878[label="1;7pkt 7fpkt"];
14868--16998[label="1;2pkt 2fpkt"];
15285--17241[label="1;352pkt 352fpkt"];
</description>
    <slice>
      <filter dst_ip="198.32.66.155" src_port="53"/>
      <filter dst_ip="198.32.66.155" src_ip="40.225.0.163" src_port="443"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.43.117.227"/>
    </slice>
    <from sec="1284008741" usec="0"/>
    <to sec="1284008757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.84.173.227"/>
    </slice>
    <from sec="1284008756" usec="0"/>
    <to sec="1284008761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.186.2.228"/>
    </slice>
    <from sec="1284009096" usec="0"/>
    <to sec="1284009115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1520{
style=filled;
color=gray75;
13114[label="65.10.100.228;19pkt 19fpkt", shape=pentagon, color=darkviolet];
15921[label="65.10.100.228;19pkt 19fpkt", shape=invtriangle, color=brown];
17606[label="65.10.100.228;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1520[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.10.100.228:*, 167.190.180.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1191: (2.63158%)&lt;BR/&gt; 1189: (2.63158%)&lt;BR/&gt; 1187: (2.63158%)&lt;BR/&gt; 1186: (2.63158%)&gt;];
}
13114--15921[label="1;19pkt 19fpkt"];
13114--17606[label="1;19pkt 19fpkt"];
15921--17606[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.98" dst_port="80" src_ip="65.10.100.228"/>
    </slice>
    <from sec="1284009232" usec="0"/>
    <to sec="1284009285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.73.178.228"/>
    </slice>
    <from sec="1284008731" usec="0"/>
    <to sec="1284008742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1522{
style=filled;
color=gray75;
13123[label="118.80.199.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15926[label="118.80.199.228;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1522[shape=component, label=&lt;Rules:&lt;BR/&gt;{118.80.199.228:33931, 148.175.157.3:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33931: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
13123--15926[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.175.157.3" dst_port="25" src_ip="118.80.199.228" src_port="33931"/>
    </slice>
    <from sec="1284009071" usec="0"/>
    <to sec="1284009076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.29.33.229"/>
    </slice>
    <from sec="1284008728" usec="0"/>
    <to sec="1284008735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.45.104.229"/>
    </slice>
    <from sec="1284009205" usec="0"/>
    <to sec="1284009219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1525{
style=filled;
color=gray75;
13138[label="56.44.225.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15933[label="56.44.225.229;1pkt 1fpkt", shape=invtriangle, color=brown];
17614[label="56.44.225.229;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1525[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.44.225.229:50157, 199.56.52.97:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50157: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13138--15933[label="1;1pkt 1fpkt"];
13138--17614[label="1;1pkt 1fpkt"];
15933--17614[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.52.97" dst_port="80" src_ip="56.44.225.229" src_port="50157"/>
    </slice>
    <from sec="1284008632" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.159.116.230"/>
    </slice>
    <from sec="1284009065" usec="0"/>
    <to sec="1284009070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.145.191.231"/>
    </slice>
    <from sec="1284008420" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.122.209.232"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.180.81.233"/>
    </slice>
    <from sec="1284009053" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.16.250.235"/>
    </slice>
    <from sec="1284008651" usec="0"/>
    <to sec="1284008717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.178.84.236"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284008982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.247.101.238"/>
    </slice>
    <from sec="1284008415" usec="0"/>
    <to sec="1284009187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1534{
style=filled;
color=gray75;
13269[label="198.10.212.238;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16002[label="198.10.212.238;2pkt 2fpkt", shape=invtriangle, color=brown];
17666[label="198.10.212.238;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1534[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.10.212.238:80, 167.190.154.249:58005}[50%]&lt;BR/&gt;{198.10.212.238:80, 167.190.154.249:58006}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58006: (25%)&lt;BR/&gt; 58005: (25%)&gt;];
}
13269--16002[label="1;2pkt 2fpkt"];
13269--17666[label="1;2pkt 2fpkt"];
16002--17666[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.154.249" dst_port="58006" src_ip="198.10.212.238" src_port="80"/>
      <filter dst_ip="167.190.154.249" dst_port="58005" src_ip="198.10.212.238" src_port="80"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1535{
style=filled;
color=gray75;
13279[label="216.5.153.239;3pkt 3fpkt", shape=pentagon, color=darkviolet];
16008[label="216.5.153.239;3pkt 3fpkt", shape=invtriangle, color=brown];
17671[label="216.5.153.239;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1535[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.5.153.239:31267, 199.56.44.150:34046}[33.3333%]&lt;BR/&gt;{216.5.153.239:51071, 199.56.44.150:5200}[33.3333%]&lt;BR/&gt;{216.5.153.239:51088, 199.56.44.150:5200}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5200: (33.3333%)&lt;BR/&gt; 51088: (16.6667%)&lt;BR/&gt; 51071: (16.6667%)&lt;BR/&gt; 34046: (16.6667%)&lt;BR/&gt; 31267: (16.6667%)&gt;];
}
13279--16008[label="1;3pkt 3fpkt"];
13279--17671[label="1;3pkt 3fpkt"];
16008--17671[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.44.150" dst_port="5200" src_ip="216.5.153.239" src_port="51088"/>
      <filter dst_ip="199.56.44.150" dst_port="5200" src_ip="216.5.153.239" src_port="51071"/>
      <filter dst_ip="199.56.44.150" dst_port="34046" src_ip="216.5.153.239" src_port="31267"/>
    </slice>
    <from sec="1284009095" usec="0"/>
    <to sec="1284009131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1537{
style=filled;
color=gray75;
13282[label="34.97.192.239;256pkt 256fpkt", shape=pentagon, color=darkviolet];
16010[label="34.97.192.239;256pkt 256fpkt", shape=invtriangle, color=brown];
stat1537[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.97.192.239:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 27452: (0.195312%)&lt;BR/&gt; 27451: (0.195312%)&lt;BR/&gt; 27450: (0.195312%)&lt;BR/&gt; 27449: (0.195312%)&gt;];
}
13282--16010[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.97.192.239"/>
    </slice>
    <from sec="1284009067" usec="0"/>
    <to sec="1284009081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.81.52.240"/>
    </slice>
    <from sec="1284008962" usec="0"/>
    <to sec="1284009104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1539{
style=filled;
color=gray75;
13306[label="37.61.84.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16023[label="37.61.84.241;1pkt 1fpkt", shape=invtriangle, color=brown];
17676[label="37.61.84.241;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1539[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.61.84.241:2307, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2307: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13306--16023[label="1;1pkt 1fpkt"];
13306--17676[label="1;1pkt 1fpkt"];
16023--17676[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="37.61.84.241" src_port="2307"/>
    </slice>
    <from sec="1284009260" usec="0"/>
    <to sec="1284009265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1540{
style=filled;
color=gray75;
13309[label="131.60.138.241;3pkt 3fpkt", shape=pentagon, color=darkviolet];
16025[label="131.60.138.241;3pkt 3fpkt", shape=invtriangle, color=brown];
17678[label="131.60.138.241;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1540[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.60.138.241:80, 209.160.67.162:63534}[33.3333%]&lt;BR/&gt;{131.60.138.241:80, 33.73.177.53:47210}[33.3333%]&lt;BR/&gt;{131.60.138.241:80, 33.73.177.53:51540}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63534: (16.6667%)&lt;BR/&gt; 51540: (16.6667%)&lt;BR/&gt; 47210: (16.6667%)&gt;];
}
13309--16025[label="1;3pkt 3fpkt"];
13309--17678[label="1;3pkt 3fpkt"];
16025--17678[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.177.53" dst_port="51540" src_ip="131.60.138.241" src_port="80"/>
      <filter dst_ip="33.73.177.53" dst_port="47210" src_ip="131.60.138.241" src_port="80"/>
      <filter dst_ip="209.160.67.162" dst_port="63534" src_ip="131.60.138.241" src_port="80"/>
    </slice>
    <from sec="1284008608" usec="0"/>
    <to sec="1284009261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.248.151.241"/>
    </slice>
    <from sec="1284008739" usec="0"/>
    <to sec="1284008750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.91.7.243"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.177.27.243"/>
    </slice>
    <from sec="1284008934" usec="0"/>
    <to sec="1284008950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35209,2.38909,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1544{
style=filled;
color=gray75;
273[label="164.12.249.187;d;1297pkt 1297fpkt", shape=diamond, color=yellow];
274[label="0.29.78.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
2987[label="3.144.75.196;s;3pkt 3fpkt", shape=diamond, color=yellow];
7432[label="3.144.75.196;s;3pkt 3fpkt", shape=hexagon, color=black];
8304[label="164.12.249.187;d;1112pkt 1112fpkt", shape=hexagon, color=black];
9092[label="21.224.66.8;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11030[label="220.168.149.108;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11394[label="187.79.94.129;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12594[label="3.144.75.196;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12595[label="29.239.81.196;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13211[label="216.128.135.235;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13328[label="185.186.62.243;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14710[label="220.168.149.108;7pkt 7fpkt", shape=invtriangle, color=brown];
15629[label="3.144.75.196;3pkt 3fpkt", shape=invtriangle, color=brown];
15630[label="29.239.81.196;7pkt 7fpkt", shape=invtriangle, color=brown];
15972[label="216.128.135.235;12pkt 12fpkt", shape=invtriangle, color=brown];
16038[label="185.186.62.243;16pkt 16fpkt", shape=invtriangle, color=brown];
17438[label="3.144.75.196;3pkt 3fpkt", shape=invhouse, color=bisque];
17645[label="216.128.135.235;12pkt 12fpkt", shape=invhouse, color=bisque];
17683[label="185.186.62.243;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1544[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.12.249.187:10067}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10067: (33.1505%)&lt;BR/&gt; 0: (5.32915%)&lt;BR/&gt; 80: (1.66536%)&lt;BR/&gt; 9514: (0.999216%)&lt;BR/&gt; 3277: (0.783699%)&gt;];
}
273--274[label="1;1pkt 1fpkt"];
273--2987[label="1;3pkt 3fpkt"];
273--7432[label="1;3pkt 3fpkt"];
273--8304[label="1;1112pkt 1112fpkt"];
273--9092[label="1;10pkt 10fpkt"];
273--11030[label="0.857143;6pkt 6fpkt"];
273--11394[label="1;5pkt 5fpkt"];
273--12098[label="0.0416667;1pkt 1fpkt"];
273--12594[label="1;3pkt 3fpkt"];
273--12595[label="1;7pkt 7fpkt"];
273--13211[label="0.833333;10pkt 10fpkt"];
273--13328[label="0.875;14pkt 14fpkt"];
273--14710[label="0.857143;6pkt 6fpkt"];
273--15629[label="1;3pkt 3fpkt"];
273--15630[label="1;7pkt 7fpkt"];
273--15972[label="0.833333;10pkt 10fpkt"];
273--16038[label="0.875;14pkt 14fpkt"];
273--17438[label="1;3pkt 3fpkt"];
273--17645[label="0.833333;10pkt 10fpkt"];
273--17683[label="0.875;14pkt 14fpkt"];
274--8304[label="1;1pkt 1fpkt"];
2987--7432[label="1;3pkt 3fpkt"];
2987--8304[label="1;3pkt 3fpkt"];
2987--12594[label="1;3pkt 3fpkt"];
2987--15629[label="1;3pkt 3fpkt"];
2987--17438[label="1;3pkt 3fpkt"];
7432--8304[label="1;3pkt 3fpkt"];
7432--12594[label="1;3pkt 3fpkt"];
7432--15629[label="1;3pkt 3fpkt"];
7432--17438[label="1;3pkt 3fpkt"];
8304--9092[label="0.8;8pkt 8fpkt"];
8304--11030[label="0.571429;4pkt 4fpkt"];
8304--11394[label="1;5pkt 5fpkt"];
8304--12098[label="0.0416667;1pkt 1fpkt"];
8304--12594[label="1;3pkt 3fpkt"];
8304--12595[label="0.714286;5pkt 5fpkt"];
8304--13211[label="0.666667;8pkt 8fpkt"];
8304--13328[label="0.75;12pkt 12fpkt"];
8304--14710[label="0.571429;4pkt 4fpkt"];
8304--15629[label="1;3pkt 3fpkt"];
8304--15630[label="0.714286;5pkt 5fpkt"];
8304--15972[label="0.666667;8pkt 8fpkt"];
8304--16038[label="0.75;12pkt 12fpkt"];
8304--17438[label="1;3pkt 3fpkt"];
8304--17645[label="0.666667;8pkt 8fpkt"];
8304--17683[label="0.75;12pkt 12fpkt"];
11030--14710[label="1;7pkt 7fpkt"];
12594--15629[label="1;3pkt 3fpkt"];
12594--17438[label="1;3pkt 3fpkt"];
12595--15630[label="1;7pkt 7fpkt"];
13211--15972[label="1;12pkt 12fpkt"];
13211--17645[label="1;12pkt 12fpkt"];
13328--16038[label="1;16pkt 16fpkt"];
13328--17683[label="1;16pkt 16fpkt"];
15629--17438[label="1;3pkt 3fpkt"];
15972--17645[label="1;12pkt 12fpkt"];
16038--17683[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="164.12.249.187" dst_port="10067"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934762,2.42922,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1545{
style=filled;
color=gray75;
2887[label="167.190.202.47;d;196pkt 196fpkt", shape=diamond, color=yellow];
5998[label="221.99.39.246;s;6pkt 6fpkt", shape=diamond, color=yellow];
6321[label="21.143.127.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
9331[label="16.218.150.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12568[label="25.23.41.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13338[label="221.99.39.244;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13366[label="221.99.39.246;6pkt 6fpkt", shape=pentagon, color=darkviolet];
16045[label="221.99.39.244;7pkt 7fpkt", shape=invtriangle, color=brown];
17689[label="221.99.39.244;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1545[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 167.190.202.47:*}[30.6122%]&lt;BR/&gt;{*:*, 167.190.202.47:13426}[27.0408%]&lt;BR/&gt;{*:*, 167.190.202.47:8889}[23.4694%]&lt;BR/&gt;{*:8000, 167.190.202.47:*}[20.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (15.5172%)&lt;BR/&gt; 13426: (11.4224%)&lt;BR/&gt; 8889: (10.5603%)&lt;BR/&gt; 8000: (9.26724%)&lt;BR/&gt; 443: (6.68103%)&gt;];
}
2887--5998[label="1;6pkt 6fpkt"];
2887--6321[label="1;1pkt 1fpkt"];
2887--9331[label="1;1pkt 1fpkt"];
2887--12568[label="1;1pkt 1fpkt"];
2887--13338[label="1;7pkt 7fpkt"];
2887--13366[label="1;6pkt 6fpkt"];
2887--16045[label="1;7pkt 7fpkt"];
2887--17689[label="1;7pkt 7fpkt"];
5998--13366[label="1;6pkt 6fpkt"];
13338--16045[label="1;7pkt 7fpkt"];
13338--17689[label="1;7pkt 7fpkt"];
16045--17689[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.202.47" src_port="80"/>
      <filter dst_ip="167.190.202.47" src_port="8000"/>
      <filter dst_ip="167.190.202.47" dst_port="13426"/>
      <filter dst_ip="167.190.202.47" dst_port="8889"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.229.170.245"/>
    </slice>
    <from sec="1284009142" usec="0"/>
    <to sec="1284009272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1547{
style=filled;
color=gray75;
13378[label="22.232.220.246;229pkt 229fpkt", shape=pentagon, color=darkviolet];
16065[label="22.232.220.246;229pkt 229fpkt", shape=invtriangle, color=brown];
17704[label="22.232.220.246;229pkt 229fpkt", shape=invhouse, color=bisque];
stat1547[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.232.220.246:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
13378--16065[label="1;229pkt 229fpkt"];
13378--17704[label="1;229pkt 229fpkt"];
16065--17704[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="22.232.220.246" src_port="5060"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.133.50.247"/>
    </slice>
    <from sec="1284008981" usec="0"/>
    <to sec="1284009007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1549{
style=filled;
color=gray75;
13384[label="19.75.131.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16069[label="19.75.131.247;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1549[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.75.131.247:12265, 145.105.180.123:15000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (50%)&lt;BR/&gt; 12265: (50%)&gt;];
}
13384--16069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.180.123" dst_port="15000" src_ip="19.75.131.247" src_port="12265"/>
    </slice>
    <from sec="1284009054" usec="0"/>
    <to sec="1284009288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1550{
style=filled;
color=gray75;
13388[label="22.232.220.247;234pkt 234fpkt", shape=pentagon, color=darkviolet];
16071[label="22.232.220.247;234pkt 234fpkt", shape=invtriangle, color=brown];
17709[label="22.232.220.247;234pkt 234fpkt", shape=invhouse, color=bisque];
stat1550[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.232.220.247:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
13388--16071[label="1;234pkt 234fpkt"];
13388--17709[label="1;234pkt 234fpkt"];
16071--17709[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="22.232.220.247" src_port="5060"/>
    </slice>
    <from sec="1284008404" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1551{
style=filled;
color=gray75;
13393[label="27.1.97.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16076[label="27.1.97.248;1pkt 1fpkt", shape=invtriangle, color=brown];
17711[label="27.1.97.248;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1551[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.1.97.248:6281, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6281: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13393--16076[label="1;1pkt 1fpkt"];
13393--17711[label="1;1pkt 1fpkt"];
16076--17711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="27.1.97.248" src_port="6281"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.162.12.250"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="187.158.43.250"/>
    </slice>
    <from sec="1284008473" usec="0"/>
    <to sec="1284008508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.236.108.250"/>
    </slice>
    <from sec="1284008806" usec="0"/>
    <to sec="1284008854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.148.152.250"/>
    </slice>
    <from sec="1284008952" usec="0"/>
    <to sec="1284008968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1556{
style=filled;
color=gray75;
13437[label="84.219.60.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16102[label="84.219.60.251;1pkt 1fpkt", shape=invtriangle, color=brown];
17724[label="84.219.60.251;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1556[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.219.60.251:2056, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2056: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13437--16102[label="1;1pkt 1fpkt"];
13437--17724[label="1;1pkt 1fpkt"];
16102--17724[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="84.219.60.251" src_port="2056"/>
    </slice>
    <from sec="1284009265" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1557{
style=filled;
color=gray75;
13440[label="34.235.137.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16104[label="34.235.137.251;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1557[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.235.137.251:80, 167.190.2.6:1302}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1302: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13440--16104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.2.6" dst_port="1302" src_ip="34.235.137.251" src_port="80"/>
    </slice>
    <from sec="1284008707" usec="0"/>
    <to sec="1284008740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546388,2.53157,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.83.115.254"/>
    </slice>
    <from sec="1284008695" usec="0"/>
    <to sec="1284008711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1559{
style=filled;
color=gray75;
13472[label="211.46.154.254;9pkt 9fpkt", shape=pentagon, color=darkviolet];
16126[label="211.46.154.254;9pkt 9fpkt", shape=invtriangle, color=brown];
17739[label="211.46.154.254;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1559[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.46.154.254:80, 167.190.110.116:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49238: (5.55556%)&lt;BR/&gt; 49237: (5.55556%)&lt;BR/&gt; 49236: (5.55556%)&lt;BR/&gt; 49235: (5.55556%)&gt;];
}
13472--16126[label="1;9pkt 9fpkt"];
13472--17739[label="1;9pkt 9fpkt"];
16126--17739[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.110.116" src_ip="211.46.154.254" src_port="80"/>
    </slice>
    <from sec="1284008990" usec="0"/>
    <to sec="1284009036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723827,2.4707,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1560{
style=filled;
color=gray75;
13475[label="148.175.221.254;12pkt 12fpkt", shape=pentagon, color=darkviolet];
16128[label="148.175.221.254;12pkt 12fpkt", shape=invtriangle, color=brown];
17740[label="148.175.221.254;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1560[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.175.221.254:*, 209.50.48.255:80}[58.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8333%)&lt;BR/&gt; 65485: (4.16667%)&lt;BR/&gt; 65483: (4.16667%)&lt;BR/&gt; 65482: (4.16667%)&lt;BR/&gt; 65481: (4.16667%)&gt;];
}
13475--16128[label="1;12pkt 12fpkt"];
13475--17740[label="1;12pkt 12fpkt"];
16128--17740[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.48.255" dst_port="80" src_ip="148.175.221.254"/>
    </slice>
    <from sec="1284009257" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.514408,2.49381,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1561{
style=filled;
color=gray75;
13488[label="60.140.228.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16137[label="60.140.228.255;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1561[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.140.228.255:59701, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59701: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13488--16137[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="60.140.228.255" src_port="59701"/>
    </slice>
    <from sec="1284009290" usec="0"/>
    <to sec="1284009294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.164.18.0"/>
    </slice>
    <from sec="1284008986" usec="0"/>
    <to sec="1284009001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.4.48.0"/>
    </slice>
    <from sec="1284008657" usec="0"/>
    <to sec="1284008674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.162.186.0"/>
    </slice>
    <from sec="1284008687" usec="0"/>
    <to sec="1284008722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.34.46.3"/>
    </slice>
    <from sec="1284009023" usec="0"/>
    <to sec="1284009051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.81.128.3"/>
    </slice>
    <from sec="1284008463" usec="0"/>
    <to sec="1284008475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.148.158.5"/>
    </slice>
    <from sec="1284008448" usec="0"/>
    <to sec="1284008499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.32.206.5"/>
    </slice>
    <from sec="1284008986" usec="0"/>
    <to sec="1284009051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.96.118.6"/>
    </slice>
    <from sec="1284008909" usec="0"/>
    <to sec="1284008921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.120.50.8"/>
    </slice>
    <from sec="1284009045" usec="0"/>
    <to sec="1284009128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.67.162.8"/>
    </slice>
    <from sec="1284009288" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.236.171.8"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.40.7.9"/>
    </slice>
    <from sec="1284009172" usec="0"/>
    <to sec="1284009259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746893,2.5088,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1574{
style=filled;
color=gray75;
13587[label="209.160.99.9;1pkt 1fpkt", shape=invtriangle, color=brown];
16204[label="209.160.99.9;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1574[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.160.99.9:45658, 199.56.57.65:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45658: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
13587--16204[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.57.65" dst_port="995" src_ip="209.160.99.9" src_port="45658"/>
    </slice>
    <from sec="1284009293" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.18.3.10"/>
    </slice>
    <from sec="1284008489" usec="0"/>
    <to sec="1284008507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.124.38.10"/>
    </slice>
    <from sec="1284009164" usec="0"/>
    <to sec="1284009181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.58.168.10"/>
    </slice>
    <from sec="1284009075" usec="0"/>
    <to sec="1284009081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.88.176.10"/>
    </slice>
    <from sec="1284009121" usec="0"/>
    <to sec="1284009128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.2.229.10"/>
    </slice>
    <from sec="1284008975" usec="0"/>
    <to sec="1284009127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.45.66.11"/>
    </slice>
    <from sec="1284008989" usec="0"/>
    <to sec="1284009117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.12.115.12"/>
    </slice>
    <from sec="1284008901" usec="0"/>
    <to sec="1284008912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.169.167.12"/>
    </slice>
    <from sec="1284009059" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.193.39.13"/>
    </slice>
    <from sec="1284008965" usec="0"/>
    <to sec="1284008990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.226.64.13"/>
    </slice>
    <from sec="1284008694" usec="0"/>
    <to sec="1284008739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.35.117.13"/>
    </slice>
    <from sec="1284008795" usec="0"/>
    <to sec="1284008832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.198.46.14"/>
    </slice>
    <from sec="1284008735" usec="0"/>
    <to sec="1284008919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.146.74.14"/>
    </slice>
    <from sec="1284009178" usec="0"/>
    <to sec="1284009222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.45.116.14"/>
    </slice>
    <from sec="1284008492" usec="0"/>
    <to sec="1284008497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.109.184.14"/>
    </slice>
    <from sec="1284009191" usec="0"/>
    <to sec="1284009195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.72.188.15"/>
    </slice>
    <from sec="1284008975" usec="0"/>
    <to sec="1284008988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.162.86.16"/>
    </slice>
    <from sec="1284008950" usec="0"/>
    <to sec="1284008975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.81.185.17"/>
    </slice>
    <from sec="1284008974" usec="0"/>
    <to sec="1284008977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.170.200.17"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284008986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.198.24.18"/>
    </slice>
    <from sec="1284008650" usec="0"/>
    <to sec="1284009207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.215.142.18"/>
    </slice>
    <from sec="1284009093" usec="0"/>
    <to sec="1284009123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.115.215.18"/>
    </slice>
    <from sec="1284008672" usec="0"/>
    <to sec="1284008686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.80.160.19"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.228.128.21"/>
    </slice>
    <from sec="1284009180" usec="0"/>
    <to sec="1284009223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.162.77.22"/>
    </slice>
    <from sec="1284009275" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.69.134.23"/>
    </slice>
    <from sec="1284008945" usec="0"/>
    <to sec="1284008967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="186.85.163.26"/>
    </slice>
    <from sec="1284008952" usec="0"/>
    <to sec="1284008986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.162.226.26"/>
    </slice>
    <from sec="1284008513" usec="0"/>
    <to sec="1284008683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643196,2.49932,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1604{
style=filled;
color=gray75;
9482[label="88.224.61.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16333[label="88.224.61.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1604[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.224.61.27:80, 199.56.54.7:48321}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48321: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9482--16333[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.54.7" dst_port="48321" src_ip="88.224.61.27" src_port="80"/>
    </slice>
    <from sec="1284009235" usec="0"/>
    <to sec="1284009283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643196,2.49932,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1605{
style=filled;
color=gray75;
9483[label="183.11.106.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16334[label="183.11.106.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1605[shape=component, label=&lt;Rules:&lt;BR/&gt;{183.11.106.27:1988, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1988: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9483--16334[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="183.11.106.27" src_port="1988"/>
    </slice>
    <from sec="1284009143" usec="0"/>
    <to sec="1284009168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.33.244.29"/>
    </slice>
    <from sec="1284009177" usec="0"/>
    <to sec="1284009188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.98.52.30"/>
    </slice>
    <from sec="1284008837" usec="0"/>
    <to sec="1284009101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.198.218.30"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.22.10.34"/>
    </slice>
    <from sec="1284009270" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.32.56.34"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284008972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.93.154.34"/>
    </slice>
    <from sec="1284008955" usec="0"/>
    <to sec="1284008970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746893,2.5088,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1612{
style=filled;
color=gray75;
13884[label="148.52.225.35;1pkt 1fpkt", shape=invtriangle, color=brown];
16381[label="148.52.225.35;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1612[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.225.35:80, 42.241.80.109:53305}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53305: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13884--16381[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="42.241.80.109" dst_port="53305" src_ip="148.52.225.35" src_port="80"/>
    </slice>
    <from sec="1284009281" usec="0"/>
    <to sec="1284009285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.42.158.36"/>
    </slice>
    <from sec="1284008681" usec="0"/>
    <to sec="1284008755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.122.217.36"/>
    </slice>
    <from sec="1284009262" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.13.0.37"/>
    </slice>
    <from sec="1284009094" usec="0"/>
    <to sec="1284009124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.237.188.38"/>
    </slice>
    <from sec="1284008798" usec="0"/>
    <to sec="1284008802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="190.16.87.39"/>
    </slice>
    <from sec="1284008749" usec="0"/>
    <to sec="1284008763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.168.55.40"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.160.99.40"/>
    </slice>
    <from sec="1284008912" usec="0"/>
    <to sec="1284008918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="189.84.208.42"/>
    </slice>
    <from sec="1284008917" usec="0"/>
    <to sec="1284009037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.192.213.43"/>
    </slice>
    <from sec="1284009178" usec="0"/>
    <to sec="1284009191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.42.196.44"/>
    </slice>
    <from sec="1284009039" usec="0"/>
    <to sec="1284009099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.17.202.44"/>
    </slice>
    <from sec="1284009189" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="122.136.247.44"/>
    </slice>
    <from sec="1284008434" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.42.236.46"/>
    </slice>
    <from sec="1284009027" usec="0"/>
    <to sec="1284009154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="186.139.35.48"/>
    </slice>
    <from sec="1284008932" usec="0"/>
    <to sec="1284008942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.149.32.50"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284008963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.102.199.50"/>
    </slice>
    <from sec="1284008982" usec="0"/>
    <to sec="1284008989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.21.26.52"/>
    </slice>
    <from sec="1284008995" usec="0"/>
    <to sec="1284009017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.12.90.53"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284009045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.162.37.54"/>
    </slice>
    <from sec="1284008793" usec="0"/>
    <to sec="1284008859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.116.87.54"/>
    </slice>
    <from sec="1284008987" usec="0"/>
    <to sec="1284009015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.23.135.54"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284009106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.110.158.54"/>
    </slice>
    <from sec="1284008547" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.139.71.57"/>
    </slice>
    <from sec="1284009177" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.133.28.58"/>
    </slice>
    <from sec="1284008409" usec="0"/>
    <to sec="1284009287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.52.135.58"/>
    </slice>
    <from sec="1284008956" usec="0"/>
    <to sec="1284008965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.4.42.59"/>
    </slice>
    <from sec="1284008951" usec="0"/>
    <to sec="1284008961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.82.69.59"/>
    </slice>
    <from sec="1284008758" usec="0"/>
    <to sec="1284008789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746893,2.5088,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1640{
style=filled;
color=gray75;
14154[label="54.162.105.60;1pkt 1fpkt", shape=invtriangle, color=brown];
16565[label="54.162.105.60;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1640[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.162.105.60:62349, 199.56.48.177:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62349: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14154--16565[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.56.48.177" dst_port="80" src_ip="54.162.105.60" src_port="62349"/>
    </slice>
    <from sec="1284009187" usec="0"/>
    <to sec="1284009224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.130.81.62"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.110.117.64"/>
    </slice>
    <from sec="1284008710" usec="0"/>
    <to sec="1284008754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.224.86.66"/>
    </slice>
    <from sec="1284008799" usec="0"/>
    <to sec="1284008808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.40.184.66"/>
    </slice>
    <from sec="1284008963" usec="0"/>
    <to sec="1284009003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.91.76.68"/>
    </slice>
    <from sec="1284008732" usec="0"/>
    <to sec="1284008749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.222.47.69"/>
    </slice>
    <from sec="1284008602" usec="0"/>
    <to sec="1284008620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.252.52.69"/>
    </slice>
    <from sec="1284008972" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="186.143.58.69"/>
    </slice>
    <from sec="1284008903" usec="0"/>
    <to sec="1284008907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.36.223.69"/>
    </slice>
    <from sec="1284008932" usec="0"/>
    <to sec="1284008992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="223.73.160.71"/>
    </slice>
    <from sec="1284008718" usec="0"/>
    <to sec="1284009281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.132.77.72"/>
    </slice>
    <from sec="1284008422" usec="0"/>
    <to sec="1284008433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.104.162.72"/>
    </slice>
    <from sec="1284009235" usec="0"/>
    <to sec="1284009242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.173.185.75"/>
    </slice>
    <from sec="1284008402" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.157.102.76"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.203.157.76"/>
    </slice>
    <from sec="1284008734" usec="0"/>
    <to sec="1284008740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.4.164.76"/>
    </slice>
    <from sec="1284008983" usec="0"/>
    <to sec="1284009028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.96.70.77"/>
    </slice>
    <from sec="1284009257" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.240.159.77"/>
    </slice>
    <from sec="1284009079" usec="0"/>
    <to sec="1284009123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.96.138.78"/>
    </slice>
    <from sec="1284009119" usec="0"/>
    <to sec="1284009122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.24.144.78"/>
    </slice>
    <from sec="1284008411" usec="0"/>
    <to sec="1284009296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.78.21.79"/>
    </slice>
    <from sec="1284009130" usec="0"/>
    <to sec="1284009148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643196,2.49932,504,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1662{
style=filled;
color=gray75;
10485[label="145.105.20.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16713[label="145.105.20.80;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1662[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.105.20.80:*, 35.105.67.107:443}[26.6667%]&lt;BR/&gt;{145.105.20.80:*, 35.105.67.107:80}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.2353%)&lt;BR/&gt; 443: (11.7647%)&lt;BR/&gt; 1964: (5.88235%)&lt;BR/&gt; 1961: (5.88235%)&lt;BR/&gt; 1962: (2.94118%)&gt;];
}
10485--16713[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="35.105.67.107" dst_port="80" src_ip="145.105.20.80"/>
      <filter dst_ip="35.105.67.107" dst_port="443" src_ip="145.105.20.80"/>
    </slice>
    <from sec="1284009190" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.81.197.82"/>
    </slice>
    <from sec="1284008930" usec="0"/>
    <to sec="1284009064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="189.61.145.83"/>
    </slice>
    <from sec="1284008950" usec="0"/>
    <to sec="1284008955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.17.199.86"/>
    </slice>
    <from sec="1284008408" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.130.217.86"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.91.65.89"/>
    </slice>
    <from sec="1284008982" usec="0"/>
    <to sec="1284008993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.144.177.93"/>
    </slice>
    <from sec="1284009048" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.112.112.96"/>
    </slice>
    <from sec="1284009040" usec="0"/>
    <to sec="1284009082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.103.15.99"/>
    </slice>
    <from sec="1284008433" usec="0"/>
    <to sec="1284009300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.47.12.101"/>
    </slice>
    <from sec="1284008941" usec="0"/>
    <to sec="1284008985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.35.17.101"/>
    </slice>
    <from sec="1284009073" usec="0"/>
    <to sec="1284009109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643196,2.49932,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1673{
style=filled;
color=gray75;
10899[label="198.83.101.101;24pkt 24fpkt", shape=pentagon, color=darkviolet];
16862[label="198.83.101.101;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1673[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.83.101.101:80, 167.190.108.249:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56625: (2.12766%)&lt;BR/&gt; 56623: (2.12766%)&lt;BR/&gt; 56621: (2.12766%)&lt;BR/&gt; 56620: (2.12766%)&gt;];
}
10899--16862[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.108.249" src_ip="198.83.101.101" src_port="80"/>
    </slice>
    <from sec="1284009221" usec="0"/>
    <to sec="1284009250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.162.140.103"/>
    </slice>
    <from sec="1284009108" usec="0"/>
    <to sec="1284009121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.107.223.105"/>
    </slice>
    <from sec="1284009147" usec="0"/>
    <to sec="1284009161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.27.187.107"/>
    </slice>
    <from sec="1284008443" usec="0"/>
    <to sec="1284009298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.42.197.107"/>
    </slice>
    <from sec="1284008499" usec="0"/>
    <to sec="1284008574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.178.156.108"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.46.200.108"/>
    </slice>
    <from sec="1284009136" usec="0"/>
    <to sec="1284009202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.211.78.112"/>
    </slice>
    <from sec="1284009138" usec="0"/>
    <to sec="1284009295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.92.180.113"/>
    </slice>
    <from sec="1284008484" usec="0"/>
    <to sec="1284008565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893018,2.49661,503,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1683{
style=filled;
color=gray75;
6190[label="148.52.10.115;s;23pkt 23fpkt", shape=diamond, color=yellow];
16949[label="148.52.10.115;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1683[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.52.10.115:80, 33.73.178.140:*}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64487: (2.17391%)&lt;BR/&gt; 63805: (2.17391%)&lt;BR/&gt; 63460: (2.17391%)&lt;BR/&gt; 60654: (2.17391%)&gt;];
}
6190--16949[label="0.956522;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="33.73.178.140" src_ip="148.52.10.115" src_port="80"/>
    </slice>
    <from sec="1284008401" usec="0"/>
    <to sec="1284009262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.105.82.116"/>
    </slice>
    <from sec="1284008956" usec="0"/>
    <to sec="1284009297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.94.18.117"/>
    </slice>
    <from sec="1284009091" usec="0"/>
    <to sec="1284009170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.162.77.117"/>
    </slice>
    <from sec="1284009124" usec="0"/>
    <to sec="1284009143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.105.220.118"/>
    </slice>
    <from sec="1284008965" usec="0"/>
    <to sec="1284009247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.216.233.120"/>
    </slice>
    <from sec="1284009114" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="173.251.243.120"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="185.155.202.121"/>
    </slice>
    <from sec="1284008531" usec="0"/>
    <to sec="1284008541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.99.196.122"/>
    </slice>
    <from sec="1284009287" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="189.40.120.127"/>
    </slice>
    <from sec="1284008966" usec="0"/>
    <to sec="1284008997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.23.36.128"/>
    </slice>
    <from sec="1284008960" usec="0"/>
    <to sec="1284008999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="185.86.43.133"/>
    </slice>
    <from sec="1284009276" usec="0"/>
    <to sec="1284009282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.174.241.134"/>
    </slice>
    <from sec="1284008426" usec="0"/>
    <to sec="1284008944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.42.134.136"/>
    </slice>
    <from sec="1284008853" usec="0"/>
    <to sec="1284008889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.68.52.138"/>
    </slice>
    <from sec="1284008744" usec="0"/>
    <to sec="1284008755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.116.228.142"/>
    </slice>
    <from sec="1284009000" usec="0"/>
    <to sec="1284009012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.68.116.144"/>
    </slice>
    <from sec="1284008871" usec="0"/>
    <to sec="1284008883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.86.133.144"/>
    </slice>
    <from sec="1284009205" usec="0"/>
    <to sec="1284009213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.62.46.145"/>
    </slice>
    <from sec="1284009229" usec="0"/>
    <to sec="1284009243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.19.96.145"/>
    </slice>
    <from sec="1284008795" usec="0"/>
    <to sec="1284008809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.80.199.146"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.74.212.146"/>
    </slice>
    <from sec="1284008896" usec="0"/>
    <to sec="1284008899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.105.168.148"/>
    </slice>
    <from sec="1284009175" usec="0"/>
    <to sec="1284009297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.137.186.148"/>
    </slice>
    <from sec="1284008951" usec="0"/>
    <to sec="1284008966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.64.87.149"/>
    </slice>
    <from sec="1284009211" usec="0"/>
    <to sec="1284009239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.237.92.150"/>
    </slice>
    <from sec="1284009235" usec="0"/>
    <to sec="1284009238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.178.15.151"/>
    </slice>
    <from sec="1284008545" usec="0"/>
    <to sec="1284009249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.88.39.151"/>
    </slice>
    <from sec="1284009025" usec="0"/>
    <to sec="1284009030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.243.43.151"/>
    </slice>
    <from sec="1284009242" usec="0"/>
    <to sec="1284009253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.36.193.151"/>
    </slice>
    <from sec="1284009204" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.43.208.152"/>
    </slice>
    <from sec="1284008940" usec="0"/>
    <to sec="1284008980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.106.16.156"/>
    </slice>
    <from sec="1284008929" usec="0"/>
    <to sec="1284008932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.247.22.159"/>
    </slice>
    <from sec="1284008971" usec="0"/>
    <to sec="1284009029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.86.237.159"/>
    </slice>
    <from sec="1284008967" usec="0"/>
    <to sec="1284009005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.893018,2.49661,503,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1717{
style=filled;
color=gray75;
6433[label="28.13.63.160;s;14pkt 14fpkt", shape=diamond, color=yellow];
17219[label="28.13.63.160;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1717[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.13.63.160:80, 145.105.141.68:*}[40%]&lt;BR/&gt;{28.13.63.160:80, 145.105.32.79:*}[40%]&lt;BR/&gt;{28.13.63.160:80, 167.190.4.149:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60550: (3.44828%)&lt;BR/&gt; 60543: (3.44828%)&lt;BR/&gt; 60542: (3.44828%)&lt;BR/&gt; 56312: (3.44828%)&gt;];
}
6433--17219[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="145.105.32.79" src_ip="28.13.63.160" src_port="80"/>
      <filter dst_ip="145.105.141.68" src_ip="28.13.63.160" src_port="80"/>
      <filter dst_ip="167.190.4.149" src_ip="28.13.63.160" src_port="80"/>
    </slice>
    <from sec="1284009057" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.93.218.160"/>
    </slice>
    <from sec="1284009242" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="186.46.29.164"/>
    </slice>
    <from sec="1284008977" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.175.197.164"/>
    </slice>
    <from sec="1284008953" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.67.92.165"/>
    </slice>
    <from sec="1284008778" usec="0"/>
    <to sec="1284008791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.164.181.167"/>
    </slice>
    <from sec="1284008439" usec="0"/>
    <to sec="1284008469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.746893,2.5088,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1723{
style=filled;
color=gray75;
15342[label="199.56.62.168;5pkt 5fpkt", shape=invtriangle, color=brown];
17276[label="199.56.62.168;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1723[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.56.62.168:80, 33.161.79.60:63882}[20%]&lt;BR/&gt;{199.56.62.168:80, 209.160.67.150:51149}[20%]&lt;BR/&gt;{199.56.62.168:80, 192.213.22.180:26177}[20%]&lt;BR/&gt;{199.56.62.168:80, 192.213.131.59:20146}[20%]&lt;BR/&gt;{199.56.62.168:80, 192.213.131.59:20161}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63882: (10%)&lt;BR/&gt; 51149: (10%)&lt;BR/&gt; 26177: (10%)&lt;BR/&gt; 20161: (10%)&gt;];
}
15342--17276[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.213.131.59" dst_port="20161" src_ip="199.56.62.168" src_port="80"/>
      <filter dst_ip="192.213.131.59" dst_port="20146" src_ip="199.56.62.168" src_port="80"/>
      <filter dst_ip="192.213.22.180" dst_port="26177" src_ip="199.56.62.168" src_port="80"/>
      <filter dst_ip="209.160.67.150" dst_port="51149" src_ip="199.56.62.168" src_port="80"/>
      <filter dst_ip="33.161.79.60" dst_port="63882" src_ip="199.56.62.168" src_port="80"/>
    </slice>
    <from sec="1284008976" usec="0"/>
    <to sec="1284009113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.191.102.168"/>
    </slice>
    <from sec="1284008579" usec="0"/>
    <to sec="1284008801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.104.141.168"/>
    </slice>
    <from sec="1284009141" usec="0"/>
    <to sec="1284009149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.212.174"/>
    </slice>
    <from sec="1284008964" usec="0"/>
    <to sec="1284008978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.88.136.175"/>
    </slice>
    <from sec="1284008946" usec="0"/>
    <to sec="1284008983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.162.181.175"/>
    </slice>
    <from sec="1284008990" usec="0"/>
    <to sec="1284009006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.51.16.176"/>
    </slice>
    <from sec="1284009044" usec="0"/>
    <to sec="1284009061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.97.48.177"/>
    </slice>
    <from sec="1284008702" usec="0"/>
    <to sec="1284008720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.109.217.178"/>
    </slice>
    <from sec="1284009264" usec="0"/>
    <to sec="1284009281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.225.254.180"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284008984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.161.201.188"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="122.134.18.191"/>
    </slice>
    <from sec="1284008415" usec="0"/>
    <to sec="1284009291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.73.26.191"/>
    </slice>
    <from sec="1284008958" usec="0"/>
    <to sec="1284008994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.48.47.192"/>
    </slice>
    <from sec="1284009053" usec="0"/>
    <to sec="1284009080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.148.145.192"/>
    </slice>
    <from sec="1284008753" usec="0"/>
    <to sec="1284008848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.166.203.192"/>
    </slice>
    <from sec="1284008425" usec="0"/>
    <to sec="1284009292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.243.208.196"/>
    </slice>
    <from sec="1284008738" usec="0"/>
    <to sec="1284008749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.643196,2.49932,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1740{
style=filled;
color=gray75;
12609[label="44.139.236.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17444[label="44.139.236.196;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1740[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.139.236.196:1121, 167.190.180.106:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1121: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12609--17444[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.190.180.106" dst_port="80" src_ip="44.139.236.196" src_port="1121"/>
    </slice>
    <from sec="1284008659" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.147.58.197"/>
    </slice>
    <from sec="1284008718" usec="0"/>
    <to sec="1284008723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.148.33.203"/>
    </slice>
    <from sec="1284008438" usec="0"/>
    <to sec="1284009205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.119.140.209"/>
    </slice>
    <from sec="1284009151" usec="0"/>
    <to sec="1284009194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.177.162.209"/>
    </slice>
    <from sec="1284009301" usec="0"/>
    <to sec="1284009302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.90.40.211"/>
    </slice>
    <from sec="1284009145" usec="0"/>
    <to sec="1284009159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.162.57.211"/>
    </slice>
    <from sec="1284008849" usec="0"/>
    <to sec="1284009065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.35.147.216"/>
    </slice>
    <from sec="1284009022" usec="0"/>
    <to sec="1284009042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.16.74.220"/>
    </slice>
    <from sec="1284009002" usec="0"/>
    <to sec="1284009189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.5.139.223"/>
    </slice>
    <from sec="1284008908" usec="0"/>
    <to sec="1284008923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.26.229.224"/>
    </slice>
    <from sec="1284009190" usec="0"/>
    <to sec="1284009200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.84.173.227"/>
    </slice>
    <from sec="1284008756" usec="0"/>
    <to sec="1284008761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.186.2.228"/>
    </slice>
    <from sec="1284009096" usec="0"/>
    <to sec="1284009115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.73.178.228"/>
    </slice>
    <from sec="1284008731" usec="0"/>
    <to sec="1284008742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.80.199.228"/>
    </slice>
    <from sec="1284009074" usec="0"/>
    <to sec="1284009076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.29.33.229"/>
    </slice>
    <from sec="1284008728" usec="0"/>
    <to sec="1284008735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.159.116.230"/>
    </slice>
    <from sec="1284009065" usec="0"/>
    <to sec="1284009070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.122.209.232"/>
    </slice>
    <from sec="1284009255" usec="0"/>
    <to sec="1284009301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.16.250.235"/>
    </slice>
    <from sec="1284008651" usec="0"/>
    <to sec="1284008717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.178.84.236"/>
    </slice>
    <from sec="1284008968" usec="0"/>
    <to sec="1284008982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.247.101.238"/>
    </slice>
    <from sec="1284008415" usec="0"/>
    <to sec="1284009187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.91.7.243"/>
    </slice>
    <from sec="1284009258" usec="0"/>
    <to sec="1284009293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.177.27.243"/>
    </slice>
    <from sec="1284008934" usec="0"/>
    <to sec="1284008950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.229.170.245"/>
    </slice>
    <from sec="1284009142" usec="0"/>
    <to sec="1284009272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.133.50.247"/>
    </slice>
    <from sec="1284008981" usec="0"/>
    <to sec="1284009007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.162.12.250"/>
    </slice>
    <from sec="1284008405" usec="0"/>
    <to sec="1284009299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="187.158.43.250"/>
    </slice>
    <from sec="1284008473" usec="0"/>
    <to sec="1284008508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669048,2.53699,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.236.108.250"/>
    </slice>
    <from sec="1284008806" usec="0"/>
    <to sec="1284008854" usec="0"/>
  </anomaly>

</admd:annotation>
