Source Country Codes (CCs)

#	Key	CCs		Name	Total		Max	Avg
01			US	United States of America	535.36 MB	44.47 %	52.38 KB/s	6.20 KB/s
02			LT	Lithuania	242.98 MB	20.18 %	12.28 KB/s	2.81 KB/s
03			NL	Netherlands	94.93 MB	7.88 %	5.49 KB/s	1.10 KB/s
04			IT	Italy	66.89 MB	5.56 %	15.41 KB/s	774.24 B/s
05			SG	Singapore	48.70 MB	4.04 %	6.61 KB/s	563.64 B/s
06			FR	France	45.90 MB	3.81 %	41.61 KB/s	531.30 B/s
07			CN	China	35.87 MB	2.98 %	1.94 KB/s	415.17 B/s
08			RU	Russian Federation	32.88 MB	2.73 %	2.62 KB/s	380.60 B/s
09			BR	Brazil	22.53 MB	1.87 %	526.89 B/s	260.78 B/s
10			GB	United Kingdom of Great Britain and Northern Ireland	13.45 MB	1.12 %	4.56 KB/s	155.62 B/s
11		Others			64.47 MB	5.36 %	19.63 KB/s	746.24 B/s

Source AS Numbers (ASNs)

#	Key	ASNs	Name	CC		Total		Max	Avg
01		N/A	N/A		XX	376.13 MB	31.24 %	46.99 KB/s	4.35 KB/s
02		56630	MELBICOM-EU-AS Melbikomas UAB		NL	242.97 MB	20.18 %	12.28 KB/s	2.81 KB/s
03		14061	DIGITALOCEAN-ASN - DigitalOcean,...		US	103.56 MB	8.60 %	12.76 KB/s	1.20 KB/s
04		205406	AURORA Aurora Group B.V.		NL	73.44 MB	6.10 %	3.13 KB/s	850.05 B/s
05		12876	AS12876		FR	49.16 MB	4.08 %	41.59 KB/s	568.98 B/s
06		63018	USDEDICATED - US Dedicated		US	48.92 MB	4.06 %	6.61 KB/s	566.17 B/s
07		53667	PONYNET - FranTech Solutions		US	47.69 MB	3.96 %	6.94 KB/s	551.99 B/s
08		31034	ARUBA-ASN		IT	35.08 MB	2.91 %	3.16 KB/s	405.99 B/s
09		200185	XANDMAIL-ASN		DE	26.88 MB	2.23 %	15.06 KB/s	311.12 B/s
10		4134	CHINANET-BACKBONE No.31,Jin-rong...		CN	18.60 MB	1.55 %	597.49 B/s	215.33 B/s
11		Others				181.53 MB	15.08 %	20.46 KB/s	2.10 KB/s

Protocols

#	Key	Protocol	Total		Max	Avg
01		TCP	1.11 GB	91.84 %	62.80 KB/s	12.80 KB/s
02		UDP	92.26 MB	7.66 %	41.79 KB/s	1.07 KB/s
03		ICMP	6.04 MB	0.50 %	98.57 B/s	69.93 B/s
04		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Destination TCP Ports

#	Key	Port	Name	Total		Max	Avg
01		23	TELNET	984.12 MB	89.01 %	61.22 KB/s	11.39 KB/s
02		22	SSH (Secure Shell)	55.34 MB	5.01 %	2.25 KB/s	640.56 B/s
03		445	Microsoft-DS Active Directory	11.38 MB	1.03 %	333.05 B/s	131.76 B/s
04		80	HTTP (Hypertext Transfer Protocol)	5.44 MB	0.49 %	2.30 KB/s	62.91 B/s
05		8000	N/A	3.42 MB	0.31 %	1.84 KB/s	39.55 B/s
06		8291	Mikrotik Winbox	3.26 MB	0.30 %	42.53 B/s	37.79 B/s
07		8080	HTTP Proxy	3.17 MB	0.29 %	1.89 KB/s	36.69 B/s
08		7547	(abused by Mirai/IoT botnets)	2.74 MB	0.25 %	47.50 B/s	31.66 B/s
09		1433	Microsoft SQL Server	1.15 MB	0.10 %	22.54 B/s	13.28 B/s
10		3389	RDP (Microsoft Terminal Server)	929.76 KB	0.08 %	35.41 B/s	10.76 B/s
11		Others		34.73 MB	3.14 %	2.72 KB/s	401.93 B/s

Destination UDP Ports

#	Key	Port	Name	Total		Max	Avg
01		5060	SIP (Session Initiation Protocol)	77.57 MB	84.08 %	41.74 KB/s	897.75 B/s
02		137	NETBIOS Name Service	690.52 KB	0.75 %	20.18 B/s	7.99 B/s
03		1900	ssdp (SSDP)	385.79 KB	0.42 %	61.06 B/s	4.47 B/s
04		5062	N/A	384.42 KB	0.42 %	116.56 B/s	4.45 B/s
05		5070	VTSAS (VersaTrans Server Agent Service)	381.66 KB	0.41 %	141.29 B/s	4.42 B/s
06		5090	N/A	379.49 KB	0.41 %	107.93 B/s	4.39 B/s
07		53413	N/A	341.14 KB	0.37 %	55.05 B/s	3.95 B/s
08		5061	SIP over TLS	340.15 KB	0.37 %	159.80 B/s	3.94 B/s
09		5080	N/A	288.33 KB	0.31 %	160.97 B/s	3.34 B/s
10		1025	N/A	196.23 KB	0.21 %	116.47 B/s	2.27 B/s
11		Others		11.30 MB	12.25 %	1.30 KB/s	130.83 B/s

Source Operating Systems (Windows)

#	Key	Operating System	Total		Max	Avg
01		Windows-Vista	6.08 MB	37.38 %	300.18 B/s	70.36 B/s
02		Windows-XP-SP1/Windows-2000-SP2+	5.21 MB	32.02 %	272.50 B/s	60.28 B/s
03		Windows-2000-RFC1323/Windows-XP-RFC1323	3.49 MB	21.44 %	287.13 B/s	40.36 B/s
04		Windows-XP-SP1/Windows-2000-SP4	778.56 KB	4.79 %	275.17 B/s	9.01 B/s
05		Windows-2000/Windows-XP	507.87 KB	3.12 %	69.20 B/s	5.88 B/s
06		Windows-XP-SP1/Windows-2000-SP3	160.92 KB	0.99 %	54.86 B/s	1.86 B/s
07		Windows-98	19.72 KB	0.12 %	16.10 B/s	0.23 B/s
08		Windows-98-noSack	15.41 KB	0.09 %	29.57 B/s	0.18 B/s
09		Windows-NT-4.0	3.11 KB	0.02 %	3.90 B/s	0.04 B/s
10		Windows-XP-RFC1323	2.64 KB	0.02 %	0.53 B/s	0.03 B/s
11		other-Windows	508.94 B	0.00 %	0.13 B/s	0.01 B/s

Source Operating Systems (Other Platforms)

#	Key	Operating System	Total		Max	Avg
01		unknown	1.08 GB	99.31 %	62.61 KB/s	12.52 KB/s
02		Linux	5.91 MB	0.54 %	410.82 B/s	68.45 B/s
03		undefined	1.60 MB	0.15 %	122.91 B/s	18.52 B/s
04		Redline	1.60 KB	0.00 %	3.32 B/s	0.02 B/s
05		NMAP	127.83 B	0.00 %	0.13 B/s	0.00 B/s
06		SunOS	57.06 B	0.00 %	0.07 B/s	0.00 B/s
07		Eagle	32.68 B	0.00 %	0.07 B/s	0.00 B/s
08		ExtremeWare-4.x	23.37 B	0.00 %	0.03 B/s	0.00 B/s
09		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Observations:

1. Each image above contains a STACK AREA graphic, which means that each data set of the graphic is stacked on top of the previous one.
   
   
2. Lists of known TCP/UDP ports and associated service names can be found at the following documents:
   • Port Numbers, from IANA.
   • List of TCP and UDP port numbers, from The Wikipedia.
   • Common Ports, from packetlife.net.
     
     
3. A list of known Country Codes can be found at IANA. The country code "XX" stands for network flows that could not be associated with any country code, for example, flows from private networks.