clustering groups by ASN and malicious FQDN