Black are downvotes. Red and blue are recovery account and voting proxy for the account respectively. Important to realize that these are sometimes yet not always relevant as measure of connectedness between accounts. When they are relevant you are likely to see some kind of puppeteer using a dozen or more accounts for flagging and downvoting.

If you are interested in the details, the Python code is available as part of the
small but growing asyncsteem sample_code collection.