Source Country Codes (CCs)

#	Key	CCs		Name	Total		Max	Avg
01			KR	Korea, The Republic of	447.16 MB	22.34 %	26.65 KB/s	5.18 KB/s
02			CN	China	389.43 MB	19.46 %	21.49 KB/s	4.51 KB/s
03			RU	Russian Federation	252.63 MB	12.62 %	19.54 KB/s	2.92 KB/s
04			US	United States of America	197.42 MB	9.86 %	13.80 KB/s	2.28 KB/s
05			IN	India	171.73 MB	8.58 %	44.20 KB/s	1.99 KB/s
06			PK	Pakistan	90.34 MB	4.51 %	8.65 KB/s	1.05 KB/s
07			SG	Singapore	52.34 MB	2.61 %	1.39 KB/s	605.77 B/s
08			VE	Venezuela (Bolivarian Republic of)	39.48 MB	1.97 %	11.91 KB/s	456.92 B/s
09			BG	Bulgaria	35.49 MB	1.77 %	3.20 KB/s	410.71 B/s
10			AR	Argentina	35.03 MB	1.75 %	9.31 KB/s	405.50 B/s
11		Others			290.62 MB	14.52 %	19.76 KB/s	3.36 KB/s

Source AS Numbers (ASNs)

#	Key	ASNs	Name	CC		Total		Max	Avg
01		4766	KIXS-AS-KR Korea Telecom		KR	422.71 MB	21.12 %	26.57 KB/s	4.89 KB/s
02		8359	MTS		RU	203.04 MB	10.14 %	3.61 KB/s	2.35 KB/s
03		4837	CHINA169-BACKBONE CHINA UNICOM C...		CN	165.67 MB	8.28 %	7.02 KB/s	1.92 KB/s
04		9829	BSNL-NIB National Internet Backb...		IN	131.20 MB	6.55 %	27.07 KB/s	1.52 KB/s
05		23888	NTC-AS-AP National Telecommunica...		PK	84.88 MB	4.24 %	1.97 KB/s	982.42 B/s
06		4134	CHINANET-BACKBONE No.31,Jin-rong...		CN	80.98 MB	4.05 %	19.67 KB/s	937.30 B/s
07		16509	AMAZON-02		US	72.50 MB	3.62 %	908.27 B/s	839.09 B/s
08		17621	CNCGROUP-SH China Unicom Shangha...		CN	62.94 MB	3.14 %	2.00 KB/s	728.45 B/s
09		27889	Telecomunicaciones MOVILNET		VE	32.87 MB	1.64 %	11.78 KB/s	380.45 B/s
10		213402	RAHATTELECOM-AS		AZ	32.72 MB	1.63 %	803.00 B/s	378.67 B/s
11		Others				712.17 MB	35.58 %	40.01 KB/s	8.24 KB/s

Protocols

#	Key	Protocol	Total		Max	Avg
01		TCP	1.80 GB	89.79 %	73.27 KB/s	20.80 KB/s
02		ICMP	183.01 MB	9.14 %	2.89 KB/s	2.12 KB/s
03		UDP	21.38 MB	1.07 %	1.58 KB/s	247.49 B/s
04		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Destination TCP Ports

#	Key	Port	Name	Total		Max	Avg
01		23	TELNET	1.58 GB	87.76 %	70.96 KB/s	18.26 KB/s
02		22	SSH (Secure Shell)	32.39 MB	1.80 %	1.05 KB/s	374.93 B/s
03		3389	RDP (Microsoft Terminal Server)	31.23 MB	1.74 %	13.55 KB/s	361.42 B/s
04		445	Microsoft-DS Active Directory	27.53 MB	1.53 %	609.05 B/s	318.62 B/s
05		80	HTTP (Hypertext Transfer Protocol)	12.06 MB	0.67 %	799.94 B/s	139.60 B/s
06		443	HTTPS (Hypertext Transfer Protocol over TLS/SSL)	4.41 MB	0.25 %	156.69 B/s	51.02 B/s
07		8080	HTTP Proxy	3.83 MB	0.21 %	206.69 B/s	44.33 B/s
08		25	SMTP (Simple Mail Transfer Protocol)	1.84 MB	0.10 %	40.69 B/s	21.34 B/s
09		1433	Microsoft SQL Server	1.78 MB	0.10 %	52.77 B/s	20.55 B/s
10		8728	Mikrotik API	1.10 MB	0.06 %	64.46 B/s	12.71 B/s
11	---	21	FTP (File Transfer Protocol - control)	1.09 MB	0.06 %	75.74 B/s	12.60 B/s
12	---	3306	MySQL	1.07 MB	0.06 %	65.16 B/s	12.40 B/s
13	---	139	NETBIOS Session Service	1.03 MB	0.06 %	94.01 B/s	11.92 B/s
14	---	8000	N/A	978.67 KB	0.05 %	55.20 B/s	11.33 B/s
15	---	554	RTSP (Real Time Stream Control Protocol)	948.05 KB	0.05 %	109.85 B/s	10.97 B/s
16	---	2222	N/A	684.14 KB	0.04 %	25.29 B/s	7.92 B/s
17	---	995	POP3S (POP version 3 over TLS/SSL)	676.21 KB	0.04 %	58.23 B/s	7.83 B/s
18	---	5000	UPnP	636.22 KB	0.04 %	30.70 B/s	7.36 B/s
19	---	8443	Apache Tomcat	602.84 KB	0.03 %	37.00 B/s	6.98 B/s
20	---	993	IMAPS (IMAP over TLS/SSL)	598.04 KB	0.03 %	60.37 B/s	6.92 B/s
21	---	2375	Docker REST API	580.43 KB	0.03 %	43.91 B/s	6.72 B/s
22	---	81	N/A	571.60 KB	0.03 %	26.41 B/s	6.62 B/s
23	---	37777	(abused by Mirai/IoT botnets)	560.51 KB	0.03 %	42.55 B/s	6.49 B/s
24	---	10000	Webmin / BackupExec	548.33 KB	0.03 %	83.06 B/s	6.35 B/s
25	---	135	Microsoft RCP	521.17 KB	0.03 %	49.97 B/s	6.03 B/s
26	---	143	IMAP (Internet Message Access Protocol)	483.44 KB	0.03 %	68.93 B/s	5.60 B/s
27	---	5555	ADB (Android Debug Bridge)	475.43 KB	0.03 %	29.02 B/s	5.50 B/s
28	---	6379	Redis	467.48 KB	0.03 %	25.38 B/s	5.41 B/s
29	---	110	POP3 (Post Office Protocol - version 3)	453.90 KB	0.03 %	23.34 B/s	5.25 B/s
30	---	4444	Blaster	452.68 KB	0.03 %	51.76 B/s	5.24 B/s
31	---	Others		90.35 MB	5.03 %	3.56 KB/s	1.05 KB/s

Destination UDP Ports

#	Key	Port	Name	Total		Max	Avg
01		4614	N/A	2.01 MB	9.38 %	538.30 B/s	23.21 B/s
02		5060	SIP (Session Initiation Protocol)	1.91 MB	8.94 %	272.99 B/s	22.14 B/s
03		443	https (secure http (TLS))	1.46 MB	6.84 %	107.37 B/s	16.93 B/s
04		500	ISAKMP	1.02 MB	4.78 %	135.68 B/s	11.83 B/s
05		123	NTP (Network Time Protocol)	991.61 KB	4.64 %	101.13 B/s	11.48 B/s
06		3702	WS-Discovery	580.01 KB	2.71 %	42.93 B/s	6.71 B/s
07		1900	SSDP	553.74 KB	2.59 %	58.01 B/s	6.41 B/s
08		53	DNS (Domain Name System)	535.43 KB	2.50 %	23.97 B/s	6.20 B/s
09		161	SNMP (Simple Network Management Protocol)	520.39 KB	2.43 %	48.86 B/s	6.02 B/s
10		853	domain-s (DNS query-response protocol run over TLS/DTLS)	442.15 KB	2.07 %	22.20 B/s	5.12 B/s
11	---	784	N/A	440.18 KB	2.06 %	26.15 B/s	5.09 B/s
12	---	5353	mDNS (Multicast DNS)	423.36 KB	1.98 %	23.67 B/s	4.90 B/s
13	---	6500	N/A	422.28 KB	1.97 %	1.41 KB/s	4.89 B/s
14	---	6881	BitTorrent	392.39 KB	1.84 %	11.17 B/s	4.54 B/s
15	---	1434	Microsoft SQL Monitor	326.45 KB	1.53 %	10.31 B/s	3.78 B/s
16	---	8081	N/A	324.06 KB	1.52 %	8.48 B/s	3.75 B/s
17	---	8853	N/A	323.99 KB	1.52 %	22.23 B/s	3.75 B/s
18	---	8000	N/A	317.49 KB	1.48 %	11.20 B/s	3.67 B/s
19	---	8080	N/A	315.23 KB	1.47 %	6.56 B/s	3.65 B/s
20	---	1027	N/A	311.17 KB	1.46 %	9.68 B/s	3.60 B/s
21	---	4000	N/A	310.61 KB	1.45 %	5.98 B/s	3.59 B/s
22	---	8083	N/A	307.16 KB	1.44 %	6.22 B/s	3.56 B/s
23	---	8082	N/A	304.24 KB	1.42 %	9.44 B/s	3.52 B/s
24	---	30301	BitTorrent	298.87 KB	1.40 %	7.52 B/s	3.46 B/s
25	---	4500	ipsec-nat-t (ipsec-msft, IPsec NAT-Traversal)	257.49 KB	1.20 %	9.32 B/s	2.98 B/s
26	---	11211	Memcached	252.76 KB	1.18 %	8.79 B/s	2.93 B/s
27	---	9034	N/A	225.67 KB	1.06 %	23.96 B/s	2.61 B/s
28	---	80	HTTP (Hypertext Transfer Protocol)	175.02 KB	0.82 %	93.88 B/s	2.03 B/s
29	---	137	NETBIOS Name Service	172.68 KB	0.81 %	20.11 B/s	2.00 B/s
30	---	3283	N/A	166.39 KB	0.78 %	20.45 B/s	1.93 B/s
31	---	Others		5.29 MB	24.74 %	740.45 B/s	61.23 B/s

Source Operating Systems (Windows)

#	Key	Operating System	Total		Max	Avg
01		Windows-XP-SP1/Windows-2000-SP2+	11.16 MB	30.20 %	385.01 B/s	129.14 B/s
02		Windows-Vista	11.00 MB	29.79 %	365.43 B/s	127.36 B/s
03		Windows-2000-RFC1323/Windows-XP-RFC1323	10.94 MB	29.61 %	249.25 B/s	126.59 B/s
04		Windows-XP-SP1/Windows-2000-SP4	3.74 MB	10.12 %	243.83 B/s	43.27 B/s
05		Windows-XP-SP1/Windows-2000-SP3	103.86 KB	0.28 %	27.07 B/s	1.20 B/s
06		Windows-2000/Windows-XP	1.17 KB	0.00 %	2.40 B/s	0.01 B/s
07		Windows-98-lowTTL	497.19 B	0.00 %	0.25 B/s	0.01 B/s
08		Windows-98	250.08 B	0.00 %	0.28 B/s	0.00 B/s
09		Windows-NT-4.0	200.00 B	0.00 %	0.26 B/s	0.00 B/s
10		Windows-XP-RFC1323	165.59 B	0.00 %	0.32 B/s	0.00 B/s
11		other-Windows	133.40 B	0.00 %	0.15 B/s	0.00 B/s

Source Operating Systems (Other Platforms)

#	Key	Operating System	Total		Max	Avg
01		unknown	1.54 GB	87.26 %	50.26 KB/s	17.78 KB/s
02		Linux	222.62 MB	12.65 %	45.40 KB/s	2.58 KB/s
03		undefined	1.52 MB	0.09 %	143.04 B/s	17.55 B/s
04		Eagle	30.51 KB	0.00 %	2.24 B/s	0.35 B/s
05		NMAP	13.87 KB	0.00 %	1.43 B/s	0.16 B/s
06		SunOS	881.48 B	0.00 %	0.28 B/s	0.01 B/s
07		OpenBSD	32.00 B	0.00 %	0.11 B/s	0.00 B/s
08		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Observations:

1. Each image above contains a STACK AREA graphic, which means that each data set of the graphic is stacked on top of the previous one.
   
   
2. Lists of known TCP/UDP ports and associated service names can be found at the following documents:
   • Port Numbers, from IANA.
   • List of TCP and UDP port numbers, from The Wikipedia.
   • Common Ports, from packetlife.net.
     
     
3. A list of known Country Codes can be found at IANA. The country code "XX" stands for network flows that could not be associated with any country code, for example, flows from private networks.