What is rapportd? In /usr/libexec/rapportd After update to 10.13.2 Firewall asked about it

Norton Antivirus notified me that a server at 192.168.200.111 was trying to access my rapportd. A WhoIs search for that address says it is a private server in Rome, Italy. A Traceroute on whoisip.ovh had 30 steps, three of them in France and the rest not clear to me. I just had Norton block access.

I would agree. On my laptop Little Snitch is completely ignoring rapportd (because it seems only on local network) and it was only the macOS Firewall that was asking.

And I suspect it was only asking because, being a naturally untrusting person where computer security is concerned, on my macOS Firewall I've unchecked the "Automatically allow built-in software to receive incoming connections" but I disallowed that so long ago I've no idea what the default setting is (but it might explain why so few are asking this question).

I'm a low-end user, and have this problem, too. Running High Sierra. Also Norton security stuff. I get repeated messages that a computer with a slightly different IP address than my own is trying to access. Should I be concerned that there is an attempt at unauthorized access to my system? Thanks.

Yesterday I upgraded to 10.13.3 (it took very long, say more than an hour).

One hour ago my iMac froze, this was, until now, very exceptional.

After switching on, this little monster appeared asking to receive icomming data. NO WAY.

I am not running Norton.

I have a fairly limited knowlege of how MacOS works, and my suspicion is based on activity and interactions between rapportd and some other system processes, so i may be way off.. however, from what information there is known about it, is it possible that rapportd is a system process which allows other network devices access to parts of the operating system which would usually require authentication? And does so without user interaction?

The name would be sort of appropriate if that was the case too.

Needed to reply to my first post on this discussion. I love stock markets etc.. and I have been saying for the past 9 months if Apple doesn't expand into a new arena they are going to bleed a trillion dollar death. They obviously don't care about personal computing anymore; focusing mainly on the iPad and super high end iMac's. With that being said and all of these RANDOM processes being run from our machines collecting data with no plan or focused way to monetize this data a new "division" needs to be created.

I've always thought something with healthcare due to all info they've been collecting on users from their iPhones for years now. But they have released something even simpler and better. Paired with Geisinger a U.S based healthcare provider in the north east. Apple is releasing an app which will allow you to get all of your medical records immediately. Wow! Lol.. Where I am from (Philly) it's a difficult process to get your medical docs.

A baby's first steps. Now what does rapportd do... oh yea it's something to do with Airplay 2.0! Involving the Homepod / Apple TV / etc ..

'rapportd' is a background daemon from Apple used for handoff and communications between Apple devices; and as such it is expected that firewall checks would detect this process requesting network access. The process is used by '/System/Library/PrivateFrameworks/Rapport.framework' and '/System/Library/PrivateFrameworks/RapportUI.framework'. The framework and process were first introduced in a subsequent system update to Sierra (10.12.x).

As noted in other thread posts, it has nothing to do with IBM Trusteer Rapport software.

This isn't Windows. Norton is probably not helping you. I assume when you say "a slightly different IP address", it means something like your Mac is 192.168.1.10 and the other computer is 192.168.1.15, means that it's something on your local network. 192.168.x.x addresses are private - they can't be routed across the Internet. Meaning that it's not someone coming in from outside. (Same private routing applies to 10.x.x.x and 172.16.x.x-172.31.x.x networks) The fact that Norton doesn't seem to understand that the other device is on the same network segment, and doesn't know what kind of device it is communicating with, illustrates that it's not very useful.

If it is Apple then why after my update did it give me this error :

"Rapportd" is not optimized for your Mac.

This app needs to be updated by its developer to improve compatibility.

I have never installed a banking app on this laptop. I do have chrome. I never use it.

Also rapportd is NOT mentioned in their Mac OSX 10.3.2 Release Notes either.

https://support.apple.com/en-us/HT208331

If you have Trusteer installed uninstall it:

http://www.trusteer.com/en/support/uninstalling-rapport-mac-os-x

happened to me too. came up every few minutes and got annoying so blocked it. was that the right ides?

More information about the software from one of the leading computer security professionals A Closer Look at Rapport from Trusteer — Krebs on Security.

This should clear out most of the confusion.

I think we are discussing a completely different daemon! (so afraid article is not relevant). Just happens to have same name as the IBM/banking system app few have installed.

Wrong OS platform. The link is for Windows, not Mac OSX.