The remote device is a Youku services client.  Youku is an internet service for streaming media to a variety of devices.

The remote device is a Kuaibo services client.  Kuaibo is an internet service for streaming media to a variety of devices.

The remote client is running the Datagram Transport Layer Security (DTLS) protocol - an encrypted protocol for UDP.  The client has just terminated a connection based on the following error code.

The remote host is running the Real Time Messaging Protocol (RTMP) which was developed by Adobe Systems.  This protocol is used to stream audio and video to a Flash client.  The default connection port for RTMP is 1935.

The following have since been patched in version 6.1.1:

  - Set-Cookie HTTP headers are processed even if the connection closed before the header was complete. An attacker could leverage this to strip security settings and obtain the HTTP cookie. (CVE-2014-1296)
  - Information disclosure due to the IOKit object storing kernel pointers, which could be used by a local attacker to defeat kernel address space layout randomization. (CVE-2014-1320)
  - A 'triple handshake' vulnerability could be leveraged by an attacker on the local network to perform a man-in-the-middle attack. (CVE-2014-1295)
  - Multiple memory corruption issues in the underlying WebKit library. (CVE-2013-2871, CVE-2014-1298, CVE-2014-1299, CVE-2014-1300, CVE-2014-1302, CVE-2014-1303, CVE-2014-1304, CVE-2014-1305, CVE-2014-1307, CVE-2014-1308, CVE-2014-1309, CVE-2014-1310, CVE-2014-1311, CVE-2014-1312, CVE-2014-1313, CVE-2014-1713)

Versions earlier than the Apple TV 6.1 update are vulnerable to multiple issues, the most serious of which could be leveraged to result in arbitrary code execution.

The remote host is running the H.248.1 Gateway Control Protocol.

The remote host is running the H.248.1 Gateway Control Protocol.  This protocol is used to manage calls between remote systems

The remote host is running the H.248.1 Gateway Control Protocol.  This protocol is used for setting up calls through a central server.

The remote host is running the H.248.1 Gateway Control Protocol.  

The remote device is a Twitch TV client.  Twitch TV is an internet service for streaming media to a variety of devices.

The remote host is running the Mac iCal calendar application.  

The remote host is running the Flixster client.  Flixster is an application which is used to stream media to a wide variety of client devices.

The remote host is running the Flipboard application.  Flipboard is a mobile application for aggregating news feeds.

The remote host is running the facebook application and has just performed an automated update.

Additional information regarding this Apple TV device has been captured via the mDNS broadcast.

The remote device is accessing the FlashGet service.  FlashGet is a service which allows clients to download files through a variety of protocols.  

The remote device is running the Avast Anti-virus software.

The remote host is running an application which is accessing the Anipang platform.  Anipang produces many games which run on a wide variety of devices.

The remote device is utilizing the AllMyApps online app store.  This service allows for application management and update via a central interface.

The remote device is utilizing the 5by5.tv streaming service.  This service allows a remote client to stream video and audio content to a wide variety of devices.

The remote host is running the ArcGIS mapping software.  This software allows users to generate reports and documents which embed the mapping software.

The remote client is running the Datagram Transport Layer Security (DTLS) protocol - an encrypted protocol for UDP.

The remote host is a bitcoin stratum client.  Bitcoin is a peer-to-peer payment network.  Bitcoin operates without a central authority or bank, relying on the individual users to both generate income and track money.  Bitcoin revenue is generated by 'mining'.  This is a CPU-intensive operation which typically runs 24/7.  This client is currently mining. 

The remote host is running a version of ZenPhoto Gallery that may be vulnerable to cross site scripting and SQL injection attacks, due to insufficient user input sanitation. Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.

The remote client has just initiated a secure connection to Google's wallet service via SSL 

The remote client has just initiated a secure connection to paypal.com via SSL.

The remote client is connecting to the flickr.com service.

The remote client is connecting to the flickr.com service, and was detected viewing images. 

Virtualizor, a web based VPS (Virtual Private Server) control panel is running on the remote host. 

The remote system is utilizing the Line Client.  Line is a chat/p2p client which is free for most major mobile phones.

The Virtualizor install hosted on the remote web server is earlier than 2.3.2 and therefore affected by a security bypass vulnerability. Due to an unspecified flaw, an attacker may be able to delete arbitrary PDNS domains that their user account does not have access to. 

The Virtualizor install hosted on the remote web server is earlier than 2.3.1 and therefore affected by an unspecified SQL injection vulnerability, which could allow an attacker to inject or manipulate SQL queries on the applications database.  This could lead to the manipulation or disclosure of arbitrary data.  An attacker could also use this attack in order to elevate their privileges.

The remote client is using Eclipse, an open-source Integrated development environment (IDE). Eclipse is composed of a base workstpace with an extensible plug-in system for customizing. 

The remote host has access Microsoft's metadata services. Starting with Windows 7 a host can obtain metadata about devices plugged into the host. The remote host has requested metadata for a new device that has been plugged in.

The remote host is running Windows 8. It has attempted to sync data used for the windows live tiles for services such as sports, weather, news and finance. Windows 8 Live Tiles allow for live updates on various data feeds.

The remote host has attempted to download an application from Microsoft's Windows Store. Windows Store is the digital distribution platform for Windows 8 and Windows RT OS. One can obtain free and paid applications using the Windows Store.

The remote host has access Microsoft's Windows Store. Windows Store is the digital distribution platform for Windows 8 and Windows RT OS. One can obtain free and paid applications using the Windows Store.

The remote client is accessing the Cydia software packages. Cydia is an indepented third-party app distribution platform for Apple iOS. Cydia is mostly use for Jailbroken devices. 

The remote client is subscribed to the Salesforce service.

The remote Android mobile device is running the Foursquare app. Foursquare is a free app used to share and save places you visit.

The remote host is running the Spiceworks client.  Spiceworks is a free software package used to manage network devices.

The remote host is running the Apple Digital Audio Access Protocol (DAAP).  This is a protocol for streaming multi-media content via the internet.

Hulu is a provider of on-demand internet streaming media available as cross-platform client to both desktops and mobile devices. Traffic observed from this host indicates it is streaming media from Hulu.com.

ID	Name	Severity
8296	Youku Client Detection	info
8295	Kuaibo Client Detection	info
8287	DTLS Client Error Detection	info
8283	RTMP Connection Detection	info
8282	RTMP Connection Detection	info
8274	Apple TV < 6.1.1 Multiple Vulnerabilities	medium
8250	Apple TV < 6.1 Multiple Vulnerabilities	high
8272	H.248.1 Host/Port Detection	info
8271	H.248.1 Gateway Control Server Detection	info
8270	H.248.1 Gateway Control Client Detection	info
8269	H.248.1 User Detection	info
8268	H.248.1 Host/Port Detection	info
8267	H.248.1 Gateway Control Server Detection	info
8266	H.248.1 Gateway Control Client Detection	info
8258	Twitch TV Client Detection	info
8255	Mac iCal Client Detection	info
8238	Flixster Client Detection	info
8237	Flipboard Client Detection	info
8236	Facebook client update (deprecated)	info
8249	Apple TV Detected	info
8227	FlashGet Client Detection	info
8230	Avast Client Detection	info
8226	Anipang Internet Gaming Detection	info
8225	AllMyApps Client Detection	info
8222	5by5 Media Streaming Detection	info
8220	ArcGIS Client Detection	info
8091	DTLS Client Detection	info
8067	Bitcoin Client Detection (Stratum)	info
8066	Bitcoin Client Detection (JSON/RPC)	info
8065	Bitcoin Client Detection (Bitcoin Protocol)	info
8019	ZenPhoto Cross Site Scripting and SQL Injection Vulnerabilities	medium
6974	Google Wallet Secure Connection Detection	info
6973	Paypal secure connection detection	info
6972	Flickr Usage	info
6971	Flickr Image View Detection	info
6945	Virtualizor Detection	info
6939	Line Client Detection	info
6947	Virtualizor < 2.3.2 PDNS Domain Deletion Security Bypass	medium
6946	Virtualizor < 2.3.1 Unspecified SQL Injection	high
6855	Eclipse IDE Software Detection	info
6763	Microsoft Windows Metadata Use Detection	info
6678	Windows 8 Tile Services Detection	info
6677	Windows 8 App Store Download Detected	info
6676	Windows 8 App Store Access	info
6591	Browsing Cydia software packages	info
6585	Salesforce Application Detection	info
6569	Foursquare app on an Android mobile device (deprecated)	info
6567	Spiceworks Client Version Detection	info
8233	Apple Streaming Protocol Client	info
6552	Hulu Streaming Detection	info

Detections

Analytics

Internet Services Family for Nessus Network Monitor

info

info

info

info

info

medium

high

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

medium

info

info

info

info

info

info

medium

high

info

info

info

info

info

info

info

info

info

info

info