Source Country Codes (CCs)

#	Key	CCs		Name	Total		Max	Avg
01			CN	China	647.55 MB	30.32 %	15.45 KB/s	7.49 KB/s
02			KR	Korea, The Republic of	336.04 MB	15.73 %	13.31 KB/s	3.89 KB/s
03			RU	Russian Federation	313.29 MB	14.67 %	15.22 KB/s	3.63 KB/s
04			US	United States of America	262.92 MB	12.31 %	25.36 KB/s	3.04 KB/s
05			PK	Pakistan	117.17 MB	5.49 %	2.78 KB/s	1.36 KB/s
06			DE	Germany	65.01 MB	3.04 %	11.36 KB/s	752.42 B/s
07			IT	Italy	60.72 MB	2.84 %	2.62 KB/s	702.75 B/s
08			BG	Bulgaria	49.51 MB	2.32 %	2.58 KB/s	573.00 B/s
09			IN	India	34.23 MB	1.60 %	6.57 KB/s	396.19 B/s
10			BR	Brazil	26.69 MB	1.25 %	13.65 KB/s	308.97 B/s
11		Others			222.79 MB	10.43 %	72.67 KB/s	2.58 KB/s

Source AS Numbers (ASNs)

#	Key	ASNs	Name	CC		Total		Max	Avg
01		4837	CHINA169-BACKBONE CHINA UNICOM C...		CN	560.72 MB	26.25 %	13.57 KB/s	6.49 KB/s
02		4766	KIXS-AS-KR Korea Telecom		KR	279.56 MB	13.09 %	13.18 KB/s	3.24 KB/s
03		8359	MTS		RU	249.73 MB	11.69 %	4.32 KB/s	2.89 KB/s
04		23888	NTC-AS-AP National Telecommunica...		PK	115.72 MB	5.42 %	2.62 KB/s	1.34 KB/s
05		14061	DIGITALOCEAN-ASN		US	87.86 MB	4.11 %	4.36 KB/s	1.02 KB/s
06		16509	AMAZON-02		US	68.24 MB	3.19 %	1.42 KB/s	789.78 B/s
07		1267	ASN-WINDTRE IUNET		IT	58.83 MB	2.75 %	2.30 KB/s	680.95 B/s
08		4134	CHINANET-BACKBONE No.31,Jin-rong...		CN	54.24 MB	2.54 %	4.76 KB/s	627.82 B/s
09		7623	HCNGYEONGBUK-AS-KR Gyeongbuk Cab...		KR	52.45 MB	2.46 %	5.14 KB/s	607.01 B/s
10		14618	AMAZON-AES		US	35.64 MB	1.67 %	700.76 B/s	412.45 B/s
11		Others				572.94 MB	26.82 %	117.30 KB/s	6.63 KB/s

Protocols

#	Key	Protocol	Total		Max	Avg
01		TCP	1.91 GB	89.19 %	38.45 KB/s	22.05 KB/s
02		ICMP	155.79 MB	7.29 %	2.01 KB/s	1.80 KB/s
03		UDP	75.08 MB	3.52 %	115.56 KB/s	868.96 B/s
04		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Destination TCP Ports

#	Key	Port	Name	Total		Max	Avg
01		23	TELNET	1.59 GB	83.37 %	34.23 KB/s	18.38 KB/s
02		3389	RDP (Microsoft Terminal Server)	107.83 MB	5.66 %	22.86 KB/s	1.25 KB/s
03		22	SSH (Secure Shell)	27.44 MB	1.44 %	1.01 KB/s	317.62 B/s
04		445	Microsoft-DS Active Directory	22.08 MB	1.16 %	503.12 B/s	255.59 B/s
05		80	HTTP (Hypertext Transfer Protocol)	18.69 MB	0.98 %	6.08 KB/s	216.36 B/s
06		8080	HTTP Proxy	6.54 MB	0.34 %	2.90 KB/s	75.72 B/s
07		443	HTTPS (Hypertext Transfer Protocol over TLS/SSL)	4.75 MB	0.25 %	250.75 B/s	54.95 B/s
08		8000	N/A	3.72 MB	0.20 %	2.58 KB/s	43.11 B/s
09		1433	Microsoft SQL Server	1.34 MB	0.07 %	33.97 B/s	15.53 B/s
10		139	NETBIOS Session Service	1.15 MB	0.06 %	64.90 B/s	13.33 B/s
11	---	21	FTP (File Transfer Protocol - control)	1.12 MB	0.06 %	69.87 B/s	12.95 B/s
12	---	3306	MySQL	986.92 KB	0.05 %	73.35 B/s	11.42 B/s
13	---	5000	UPnP	814.67 KB	0.04 %	59.13 B/s	9.43 B/s
14	---	8443	Apache Tomcat	680.35 KB	0.04 %	31.38 B/s	7.87 B/s
15	---	10000	Webmin / BackupExec	618.13 KB	0.03 %	85.45 B/s	7.15 B/s
16	---	135	Microsoft RCP	605.13 KB	0.03 %	58.23 B/s	7.00 B/s
17	---	8728	Mikrotik API	587.40 KB	0.03 %	15.11 B/s	6.80 B/s
18	---	6379	Redis	566.18 KB	0.03 %	21.25 B/s	6.55 B/s
19	---	993	IMAPS (IMAP over TLS/SSL)	561.34 KB	0.03 %	37.67 B/s	6.50 B/s
20	---	2222	N/A	552.71 KB	0.03 %	31.51 B/s	6.40 B/s
21	---	25	SMTP (Simple Mail Transfer Protocol)	526.41 KB	0.03 %	23.60 B/s	6.09 B/s
22	---	110	POP3 (Post Office Protocol - version 3)	502.89 KB	0.03 %	82.08 B/s	5.82 B/s
23	---	995	POP3S (POP version 3 over TLS/SSL)	496.56 KB	0.03 %	33.00 B/s	5.75 B/s
24	---	2375	Docker REST API	485.30 KB	0.03 %	30.69 B/s	5.62 B/s
25	---	554	RTSP (Real Time Stream Control Protocol)	483.36 KB	0.03 %	38.17 B/s	5.59 B/s
26	---	465	SMTP over SSL	439.94 KB	0.02 %	41.46 B/s	5.09 B/s
27	---	7547	TR-069 (abused by Mirai/IoT botnets)	438.74 KB	0.02 %	23.68 B/s	5.08 B/s
28	---	5060	SIP (Session Initiation Protocol)	425.30 KB	0.02 %	33.61 B/s	4.92 B/s
29	---	143	IMAP (Internet Message Access Protocol)	409.68 KB	0.02 %	26.02 B/s	4.74 B/s
30	---	4444	Blaster	393.72 KB	0.02 %	79.55 B/s	4.56 B/s
31	---	Others		111.50 MB	5.85 %	3.71 KB/s	1.29 KB/s

Destination UDP Ports

#	Key	Port	Name	Total		Max	Avg
01		5060	SIP (Session Initiation Protocol)	23.53 MB	31.34 %	1.23 KB/s	272.33 B/s
02		443	N/A	1.35 MB	1.80 %	110.53 B/s	15.67 B/s
03		500	ISAKMP	687.51 KB	0.92 %	105.90 B/s	7.96 B/s
04		123	NTP (Network Time Protocol)	668.68 KB	0.89 %	63.41 B/s	7.74 B/s
05		53413	Netis Router Backdoor	504.77 KB	0.67 %	270.80 B/s	5.84 B/s
06		161	SNMP (Simple Network Management Protocol)	485.15 KB	0.65 %	57.23 B/s	5.62 B/s
07		53	DNS (Domain Name System)	468.76 KB	0.62 %	55.20 B/s	5.43 B/s
08		1900	SSDP	422.44 KB	0.56 %	63.64 B/s	4.89 B/s
09		3702	WS-Discovery	378.27 KB	0.50 %	39.57 B/s	4.38 B/s
10		4614	N/A	314.12 KB	0.42 %	184.31 B/s	3.64 B/s
11	---	5353	mDNS (Multicast DNS)	295.82 KB	0.39 %	19.20 B/s	3.42 B/s
12	---	6881	BitTorrent	280.45 KB	0.37 %	7.07 B/s	3.25 B/s
13	---	1434	Microsoft SQL Monitor	251.01 KB	0.33 %	10.18 B/s	2.91 B/s
14	---	4500	ipsec-nat-t (ipsec-msft, IPsec NAT-Traversal)	246.50 KB	0.33 %	14.81 B/s	2.85 B/s
15	---	8080	N/A	235.98 KB	0.31 %	7.76 B/s	2.73 B/s
16	---	8081	N/A	232.19 KB	0.31 %	7.31 B/s	2.69 B/s
17	---	30301	BitTorrent	231.32 KB	0.31 %	6.32 B/s	2.68 B/s
18	---	8000	N/A	230.10 KB	0.31 %	6.55 B/s	2.66 B/s
19	---	4000	N/A	228.72 KB	0.30 %	4.31 B/s	2.65 B/s
20	---	8082	N/A	228.29 KB	0.30 %	4.93 B/s	2.64 B/s
21	---	8083	N/A	226.63 KB	0.30 %	4.22 B/s	2.62 B/s
22	---	1027	N/A	222.03 KB	0.30 %	4.56 B/s	2.57 B/s
23	---	11211	Memcached	207.00 KB	0.28 %	34.32 B/s	2.40 B/s
24	---	137	NETBIOS Name Service	141.54 KB	0.19 %	69.69 B/s	1.64 B/s
25	---	5684	N/A	120.42 KB	0.16 %	11.01 B/s	1.39 B/s
26	---	5061	SIP over TLS	117.00 KB	0.16 %	4.63 B/s	1.35 B/s
27	---	389	LDAP (Lightweight Directory Access)	105.61 KB	0.14 %	10.42 B/s	1.22 B/s
28	---	55129	N/A	83.76 KB	0.11 %	2.40 B/s	0.97 B/s
29	---	427	svrloc	82.01 KB	0.11 %	22.10 B/s	0.95 B/s
30	---	17185	N/A	79.27 KB	0.11 %	31.45 B/s	0.92 B/s
31	---	Others		42.42 MB	56.50 %	115.05 KB/s	490.97 B/s

Source Operating Systems (Windows)

#	Key	Operating System	Total		Max	Avg
01		Windows-2000-RFC1323/Windows-XP-RFC1323	20.98 MB	57.08 %	600.56 B/s	242.84 B/s
02		Windows-Vista	9.25 MB	25.17 %	332.37 B/s	107.09 B/s
03		Windows-XP-SP1/Windows-2000-SP2+	4.57 MB	12.43 %	161.92 B/s	52.87 B/s
04		Windows-XP-SP1/Windows-2000-SP4	1.25 MB	3.39 %	50.64 B/s	14.44 B/s
05		Windows-2000/Windows-XP	440.55 KB	1.20 %	67.43 B/s	5.10 B/s
06		Windows-XP-SP1/Windows-2000-SP3	263.00 KB	0.72 %	14.69 B/s	3.04 B/s
07		Windows-.NET	1.15 KB	0.00 %	0.33 B/s	0.01 B/s
08		Windows-XP-RFC1323	616.55 B	0.00 %	1.07 B/s	0.01 B/s
09		Windows-98-lowTTL	204.30 B	0.00 %	0.22 B/s	0.00 B/s
10		Windows-98	167.14 B	0.00 %	0.13 B/s	0.00 B/s
11		other-Windows	37.56 B	0.00 %	0.13 B/s	0.00 B/s

Source Operating Systems (Other Platforms)

#	Key	Operating System	Total		Max	Avg
01		unknown	1.60 GB	85.81 %	37.25 KB/s	18.56 KB/s
02		Linux	259.91 MB	13.91 %	13.84 KB/s	3.01 KB/s
03		undefined	5.00 MB	0.27 %	559.34 B/s	57.82 B/s
04		Eagle	129.14 KB	0.01 %	9.78 B/s	1.49 B/s
05		NMAP	10.47 KB	0.00 %	1.48 B/s	0.12 B/s
06		SymbianOS-6048	6.28 KB	0.00 %	20.92 B/s	0.07 B/s
07		SunOS	463.26 B	0.00 %	0.15 B/s	0.01 B/s
08		ExtremeWare-4.x	35.24 B	0.00 %	0.07 B/s	0.00 B/s
09		Solaris	33.00 B	0.00 %	0.11 B/s	0.00 B/s
10		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Observations:

1. Each image above contains a STACK AREA graphic, which means that each data set of the graphic is stacked on top of the previous one.
   
   
2. Lists of known TCP/UDP ports and associated service names can be found at the following documents:
   • Port Numbers, from IANA.
   • List of TCP and UDP port numbers, from The Wikipedia.
   • Common Ports, from packetlife.net.
     
     
3. A list of known Country Codes can be found at IANA. The country code "XX" stands for network flows that could not be associated with any country code, for example, flows from private networks.