Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

is it possible to have a remote user on your iphone if you never set on up?

My Iphone over the last couple of months has been acting very weird- I can not turn it off, my battery dies in 2 hours, it switches screens on me in the middle of me doing something.


i have both "user processes and root user processes running all of the time


i have never set up a root user


I live with my boyfriend who has a mac - ipad and iphone- we use the same wireless network

He has vuze and bit torrent which both i cant seen to run properly as the way they are safed or locked i can not access the files - he also has vmware fusion- again i am unable to run it -


I was told by a friend to turn on my data and watch it to see which programs or applications that I have could be possibly malfunctioning- since then I have notices in my data the following:


there are ports on my connections which i have looked up and are all associated with hacking - 5353-5433-6401-5223--80- so many more I cant bare to look through all the data I have saved- I am not technology savy - the whole process of trying to figure out if this is true or even possible is emotionally and mentally draining-


in my data there are key logs some short some long- some private some public?


key logs

which have information such as -

encodin=UTF-8"?><DOCTYPEplist PUBLIC"-aplle//dtdplist 1.0//EN


key com.apple OTAcrashcopier.successfulSubmissionTime<\key>

array

after multiple list with temperature 1 through 8- which each have a list

<real>a number<real>


it says key com.apple.springboard.thermallevels key array


<key> adlogcreation date</key>


<key>metadata</key>

<dict>


<key>ADuserIntefaceLanguage<key/>


<string> en </string>

<key> adusersetregionformat<key/>

<stiring> US </string>

<dict/>

then a list of

<Key>ad scalars<key/>

<dict>

<key/> appActivationCount.com.apple.ApStore<key>

integer 1 interger

and it then does that for each one of my applications including

count maps

mobilesms

preference

mobilemail

mobilephone

mobilesafari

key appbackgroundactive time

integer 0 interger

and goes through a list of keys associated with again each of my apps


and so on and so on


another key log-

7deviceid- a bunch of letters and numbers

then

isAnonymous:True

deviceConfigID:152

trigertime: numbers

trigger ID-655363

profileld:152998

investigation ID: 0

location udatesession

timestamp:numbers

timestampend:numbers


desired accuracy:-1

cellavilable:true

wifiavailable:true

passcodeLocked:false

airplanemode: false

ttff:0

ttffGPS:0

accessoryused:false

reachability: 1

power : true


there are bunch of key logs all different


system data logs with the following

JS:its.sf6.Bootstrap.init:initialize

JS:its.defer.bootstrap._renderpage component render complete


I have in data reports and connection the words :


local remote peer

Hash



my external IP changes constantly even at home -


ROOT usr- (never mad one)

keybagd running on my root user processes- PID 1455 PPID 1 priority : 17

sandboxd- PID 1452 PPID 1

filecoordination - PID 103 PPID 1

networkd?privile PID 72 PPID 1

Syslogd PID 18 PPID 1

usereventagent PID 13 PPID 1

kernal_task PID 0 PPID )
launchd PID 1 PPID 0

plenty more


in routing tables internet (10)

destination :127 gateway:127.0.0.1


destination:192.168.1.1 gateway:0:18:39:7c:46:d9


destination:default

gateway - 192.186.1.1


gateway pdp_ip0




internet(6) which will have about 150 destinations and gateways listed at once sometimes -


destinations can be fe80::f2dc:e2ff:fe20:e5e7%en0 flag- UHLWLi gateway f0:dc_e2:20:e5:e7 (these are always changing ) sometimes they say link7 sometimes fe80::1%Io0 or 98:d6:bb:751a:f3 or b8:17:c2:28:d6:90 or 4c:b1:99e8:26:21 linl#1 0:26:8:a2:8:2f c:77:1a:a5:4:2f 6c:c2:6d:b0:21:c2



connections on my phone: I have the following categories-

in each one the number of connections constantly changes - tcp4 running the most -

udp6 and udp4 mostly look as typed below but occastionally if i check at the right time - there are multiple- and rarly have the remote port

icmp66 - even more rare that i catch that

never port numbers


These change even while i have close all apps- and am doing absolutely nothing with my phone


tcp4


remote user 17.172.232.133.442

remote user 173.194.74.121:80 -


remote user- 17.172.232.166 : 5225


udp4- local not list - *;*

remote *:*

hostname: n/a


local: *:5353

remote: *:*

hostname: N/A


udp6

local *:5353

remote *:*

hostname- N/A


local: *:55543

remote:*:0



icmp66 local *:0 and remote *:0

with hostname N/A


data logs -

localpeer ID: mobile. 1FDC29D7-2B67-5231-9375-3BDC30E405F, store name:userdictionary, modelversionhash: SAIQVUhF7208e6_gvZx_zdKx1UAzKGem3HO2pLKjgY=ubiquityrootlocation: pfubiquitylocation: 0x1ed87c50 mobile documents/com-apple[textinput/dictionaries


springboard

bbbehavioroverride :transition date should be after provided date


searrchd

indexed all records


searchd

finished getting all applications






remote hostenames from akamaitechonlogies

so much more crap but im not sure what would be more useful to get my answer- i know some of this suff is totally normal from all the research i did but i also found a lot which i am very uncomfortable- i have updated my phone and everything - it continues

iPhone 4S, iOS 6

Posted on Sep 28, 2012 5:10 PM

Reply
Question marked as Best reply

Posted on Aug 31, 2016 6:34 PM

A number of things clued me in to the probability of Lawful Intercept interfering with my device:

*The most telling incident happened an hour or so after I updated to 9.3.5. Somehow the name under settings>general>about changed from "Rebecca's iPhone" to "TOP Station 2's iPhone"

*'Pegasus' is on my device. Pegasus is sold to law enforcement agencies and the like. Not the public.

* They accidentally sent to my voicemail a recorded conversation between myself and two other people.

* all of my accounts have been hacked, yet none of my money has been stolen or used.

* and one other thing that happened at 3 am today - something that I don't care to disclose - confirmed it.

* IP addresses in my diagnostics logs trace back to the DoD network information center in Columbus OH.

* Entries in my diagnostics include: 'gas-gauge meter' (iodb2 device), fingerprint storage and enrollment info, cellular LacTac Change logs, FUD state entries, RATs, bird, Pegasus...

I can keep going with the list of symptoms and manifestations for quite a while, but off the top of my head those are the ones that relate to surviellance and L.I.

60 replies

Oct 30, 2013 3:29 PM in response to nep157

Have the Same Problems iPod Touch And iPhone 4 Crackers Emailadresse And fb Account

Where is support and explanation

Found this aswell


Incident Identifier: C2FA1F5A-867C-4CB8-93FE-7A9B8185036C

CrashReporter Key: 357dcc2b951ea7749a6f1c4482bd4e11c82d49a0

Hardware Model: iPhone3,1

Process: Facebook [113]

Path: /var/mobile/Applications/3B04FDDD-2CC1-418C-9F5B-6B63C826138C/Facebook.app/Face book

Identifier: com.facebook.Facebook

Version: 446101 (6.6)

Code Type: ARM (Native)

Parent Process: launchd [1]


Date/Time: 2013-10-28 13:47:24.300 +0100

OS Version: iOS 7.0.3 (11B511)

Report Version: 104


Exception Type: EXC_BAD_ACCESS (SIGSEGV)

Exception Subtype: KERN_INVALID_ADDRESS at 0x0000001a

Triggered by Thread: 0


Thread 0 Crashed:

0 libobjc.A.dylib 0x3a74eb26 0x3a74b000 + 15142

1 UIKit 0x32d3154e 0x32b2b000 + 2123086

2 UIKit 0x32d307b4 0x32b2b000 + 2119604

3 UIKit 0x32d095c0 0x32b2b000 + 1959360

4 UIKit 0x32d6864a 0x32b2b000 + 2348618

5 Facebook 0x008b7726 0x64000 + 8730406

6 Facebook 0x008b6c68 0x64000 + 8727656

7 Facebook 0x008b6c68 0x64000 + 8727656

8 Facebook 0x008b6c68 0x64000 + 8727656

9 Facebook 0x00fee266 0x64000 + 16294502

10 Facebook 0x007b0008 0x64000 + 7651336

11 Facebook 0x007b0320 0x64000 + 7652128

12 Facebook 0x007b3b60 0x64000 + 7666528

13 UIKit 0x32b6b70e 0x32b2b000 + 263950

14 UIKit 0x32b6b6ae 0x32b2b000 + 263854

15 UIKit 0x32b6b68c 0x32b2b000 + 263820

16 UIKit 0x32b5711a 0x32b2b000 + 180506

17 UIKit 0x32b6b102 0x32b2b000 + 262402

18 UIKit 0x32b2ebc6 0x32b2b000 + 15302

19 UIKit 0x32b66414 0x32b2b000 + 242708

20 UIKit 0x32b65dba 0x32b2b000 + 241082

21 UIKit 0x32b3b798 0x32b2b000 + 67480

22 Facebook 0x00b163f0 0x64000 + 11215856

23 UIKit 0x32b39f9e 0x32b2b000 + 61342

24 CoreFoundation 0x3038f180 0x302f0000 + 651648

25 CoreFoundation 0x3038e64e 0x302f0000 + 648782

26 CoreFoundation 0x3038ce42 0x302f0000 + 642626

27 CoreFoundation 0x302f7c22 0x302f0000 + 31778

28 CoreFoundation 0x302f7a06 0x302f0000 + 31238

29 GraphicsServices 0x34fd627e 0x34fce000 + 33406

30 UIKit 0x32b9b044 0x32b2b000 + 458820

31 Facebook 0x0006a92a 0x64000 + 26922

32 libdyld.dylib 0x3ac5bab4 0x3ac5a000 + 6836


Thread 1:

0 libsystem_kernel.dylib 0x3acff83c 0x3acff000 + 2108

1 libdispatch.dylib 0x3ac4ae08 0x3ac35000 + 89608

2 libdispatch.dylib 0x3ac3a39e 0x3ac35000 + 21406


Thread 2:

0 libsystem_kernel.dylib 0x3acffa8c 0x3acff000 + 2700

1 libsystem_kernel.dylib 0x3acff888 0x3acff000 + 2184

2 CoreFoundation 0x3038e7be 0x302f0000 + 649150

3 CoreFoundation 0x3038cee4 0x302f0000 + 642788

4 CoreFoundation 0x302f7c22 0x302f0000 + 31778

5 CoreFoundation 0x302f7a06 0x302f0000 + 31238

6 Facebook 0x0095ccf4 0x64000 + 9407732

7 Foundation 0x30da7c82 0x30cd9000 + 846978

8 libsystem_pthread.dylib 0x3ad7ac1a 0x3ad78000 + 11290

9 libsystem_pthread.dylib 0x3ad7ab8a 0x3ad78000 + 11146

10 libsystem_pthread.dylib 0x3ad78c8c 0x3ad78000 + 3212


Thread 3 name: com.apple.NSURLConnectionLoader

Thread 3:

0 libsystem_kernel.dylib 0x3acffa8c 0x3acff000 + 2700

1 libsystem_kernel.dylib 0x3acff888 0x3acff000 + 2184

2 CoreFoundation 0x3038e7be 0x302f0000 + 649150

3 CoreFoundation 0x3038cee4 0x302f0000 + 642788

4 CoreFoundation 0x302f7c22 0x302f0000 + 31778

5 CoreFoundation 0x302f7a06 0x302f0000 + 31238

6 Foundation 0x30d322f2 0x30cd9000 + 365298

7 Foundation 0x30da7c82 0x30cd9000 + 846978

8 libsystem_pthread.dylib 0x3ad7ac1a 0x3ad78000 + 11290

9 libsystem_pthread.dylib 0x3ad7ab8a 0x3ad78000 + 11146

10 libsystem_pthread.dylib 0x3ad78c8c 0x3ad78000 + 3212


Thread 4 name: com.apple.CFSocket.private

Thread 4:

0 libsystem_kernel.dylib 0x3ad12440 0x3acff000 + 78912

1 CoreFoundation 0x30392680 0x302f0000 + 665216

2 libsystem_pthread.dylib 0x3ad7ac1a 0x3ad78000 + 11290

3 libsystem_pthread.dylib 0x3ad7ab8a 0x3ad78000 + 11146

4 libsystem_pthread.dylib 0x3ad78c8c 0x3ad78000 + 3212


Thread 5 name: com.apple.coremedia.player.async

Thread 5:

0 libsystem_kernel.dylib 0x3acffadc 0x3acff000 + 2780

1 libdispatch.dylib 0x3ac49fa0 0x3ac35000 + 85920

2 MediaToolbox 0x317e383c 0x317df000 + 18492

3 CoreMedia 0x30922234 0x308fd000 + 152116

4 libsystem_pthread.dylib 0x3ad7ac1a 0x3ad78000 + 11290

5 libsystem_pthread.dylib 0x3ad7ab8a 0x3ad78000 + 11146

6 libsystem_pthread.dylib 0x3ad78c8c 0x3ad78000 + 3212


Thread 6:

0 libsystem_kernel.dylib 0x3ad12440 0x3acff000 + 78912

1 Facebook 0x0037ecca 0x64000 + 3255498

2 Facebook 0x0037ba2a 0x64000 + 3242538

3 Facebook 0x00384780 0x64000 + 3278720

4 Facebook 0x003846a2 0x64000 + 3278498

5 libsystem_pthread.dylib 0x3ad7ac1a 0x3ad78000 + 11290

6 libsystem_pthread.dylib 0x3ad7ab8a 0x3ad78000 + 11146

7 libsystem_pthread.dylib 0x3ad78c8c 0x3ad78000 + 3212


Thread 7 name: WebThread

Thread 7:

0 libsystem_kernel.dylib 0x3acffa8c 0x3acff000 + 2700

1 libsystem_kernel.dylib 0x3acff888 0x3acff000 + 2184

2 CoreFoundation 0x3038e7be 0x302f0000 + 649150

3 CoreFoundation 0x3038cee4 0x302f0000 + 642788

4 CoreFoundation 0x302f7c22 0x302f0000 + 31778

5 CoreFoundation 0x302f7a06 0x302f0000 + 31238

6 WebCore 0x38236266 0x38177000 + 782950

7 libsystem_pthread.dylib 0x3ad7ac1a 0x3ad78000 + 11290

8 libsystem_pthread.dylib 0x3ad7ab8a 0x3ad78000 + 11146



Etc

Oct 30, 2013 3:35 PM in response to Mimimay

For those of you that are posting screen dumps from the log files, this is a user to user technical support forum, and not Apple. We do not have access to information that would explain this crash reports, so asking us what it means, and wondering why someone from support hasn't answered isn't going to help. Apple does not come to nor do they participate in the forums. You won't get a reading of your crash files here. Your only chance for that is to make an appointment at the Genius Bar.

Jan 14, 2014 5:48 AM in response to nep157

I have had the same crash reports on my iPad. I truly believe there is a remote app out there that either apple won't admit to or just don't care cause there stock is sohigh the few thousand of us having these app crashes doesn't matter to them. I have been having these problems for 5 years. It started with windows media center on a laptop. I was throwing my laptops in the garbage every six months and still am. I live in a remote town in Alaska ,not much help here. I have had every quicken,quick books program hacked as well as PC diagnostic programs mcafry , root kit removal programs you name it.i have spent thousands of dollars on security programs.3years ago I paid mcaffery 400 dollars for 2years of over the phone log mien service . They worked 2 hours the first time they fixed my laptop w/vista ,it worked for aweek before I started noticing problems. Called em up ,took an hour ,they also upgraded my security sett. 3days later iwas calling them again. The 4thtime 3 days again they started to get snotty with me. 5th time I waited a week to call them they put on hlold so long I hung up, same thing the next time. A year an a half ago feed up with windows,I bought an iPad. Being a commercial fisherman I left it home for two weeks,my wife plugs it into her laptop to access iTunes for a record player,USB type. The iPad was never the same again . It never once would back up to I cloud after that.by October 2013 .having many issues as well as crash reports, I started calling apple support about 1to2 times a week,changed my Apple ID password so many times I can't tell you! At this point I was even thinking my wife was part of the problem. I have actually found2 Remote Desktop apps on my laptops but before I could show anything what I found,within 12hours iturn on the laptop it would be missing critical program than rendered it from even starting up. I can't tell you how many sleepless nights,crazy thoughts aggravation all this has has caused me. In December 2013 brought my iPad to vegans to Cesar's palace app geek store they asked me a couple questions , said it sounded like I had hardware issues grabbed me a brand new one and sent me on my way,not giving me 1good explanation for any of my grief. It worked great for 2weeks but I hadn't downloaded any of my apps back from the App Store. The moment I did that I immediately started having trouble to the point I unloaded them all again and got one I hadn't had before. Stemmed to work okay but not how a couple of my friends seem to work.then yesterday I happen to use my credit card to buy an update for the NEW deer hunt game I was playing.it took my card an purchase was accepted, the moment I hit okay it took my 19.99 dollars or 480 gold bars away from me. A little dumb founded I tried it again,same thing happend. I was dumb enough to do it a 3rd time. Called apple support and in the moments of touching the so they could do the diagnostic report there was no response and seconds later the chat session is disconnected. Thi happend twice.they called me at 7:00 am today,spent an half hour getting my money returned on my credit card with I tunes . Had to call apple support back cause the deer app was froze up. They had me remove the app an reinstall it.i had 26 crash reports with at least25i issues on each one stemming from the new deer hunt app linking it to every program and system library wifi you name it it's mind boggling.they did a diagnostic said everything looks good don't hesitate to call if I have any more issues.with response back as to way any of what my problem might be.But in my digging after I have come to believe the problem started in the developer menu. Once things are tweaked there it doesn't matter what you do once programming is messed with you can't get rid of it ,it just gets worse. That's my story,!!!


<Edited by Host>

Sep 27, 2014 1:11 PM in response to Txhippie

Hi everyone, im gonna refrain from posting the diagnostic report since is similar to everyone's else here.Just like some of you guys here, I've encountered the same thing twice, I temporary stopped using my iphones & my apple ID after being diagnosed with mental disorder & is starting to regret I picked it up again as i am currently on the verge of insanity. I urgently need help, my 'used to be normal' life is now in despair.


Again, i plead for urgent help. It probably sound ridiculous to many, but i am so desperate for help. I do not want to return to rehab for my disorder. Please help.


<Email Edited By Host>

Nov 12, 2014 9:14 PM in response to Desperation

Possible installation without your knowledge or approval of one of these programs. StealthGenie, mSpy or FlexiSpy Extreme. If, you have some time read about these programs. And, take into consideration while your reading and compare what these programs do to what's been going on in your life with your devices.These hidden monitering programs are helpful when used for the right reasons. At, mSpy website they explain what the program is meant for. Everyone, has their own motives why they do what they do. I came into this forum, a long while after this thread was started. I' m not going to list the stuff that's been going on with my, Mac mini, 2 iPads and my iPhone 5, that's just the Apple stuff. It's another story with my Windows based PC's.Because, I already read it in all of your posts and thanks for posting.To, install mSpy they say you need to have 10 minutes of physically holding the device, most folks I know sleep longer then 10 minutes. mSpy, says you won't even know because it it so hidden, and you dont even know it's there. To, the poster who stated it was driving him almost "insane",always think positive. All,these devices are just material things brother, don't let'em get inside your head. That's, why some stuff you have to figure it out on your own. Lot's of reading about iOS X......Aloha


<Edited by Host>

Nov 13, 2014 5:28 AM in response to 19Split47

19Split47 wrote:


Cydia, did he do it himself? it's jailbroken. If he did it himself its on him. In, order to get them spy programs on your devices it also has to be jailbroken before installing.


You're replying to a posts that's over two years old. And it's not saying negative things about Apple that is getting your posts pulled, it's discussing jailbreaking.

is it possible to have a remote user on your iphone if you never set on up?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.