Seeing heavier than average activity all of a sudden from “http://rum-ingest.usO.signalfx.com”, figured out it’s only my moms iPhone
Anyone have an ideas on what app(s) could be the culprit? It seems to be regular enough to have it be 469 hits a day! Which is nuts. I would ask her, but as many children of a parent know’s, that’s like pulling teeth lol… But I figured some more tech savvy folks here might actually already have the answer as Reddit and search engines aren’t as reliable these days. 😣 Thanks in advance for any help as I’m stumped to figure it out as she complains about the battery drain incessantly.
20 replies
Sorry, don't have an answer for iPhones, but if someone has similar issue originating from Android device, RethinkDNS app logs could be useful: https://f-droid.org/packages/com.celzero.bravedns/
One interesting app I have right now when it comes to network crap is NetMonster. I blocked its network access, but it keeps making roughly 2.3 DNS requests per second. That's almost 6 million DNS requests per month.
Oh, and when I used NextDNS blockpage, it kept making connections to it, wasting network bandwidth. But that option also revealed to me that many apps which show ads ignore TLS certificates, and just display what gets fed to them.
If I had to bet, it was probably bundled in with some app she downloaded. There are so many shady games and utility apps that install their own spyware into the phone. It might not even be anything that she uses all that often. Once it's in there, it just does it's own thing in the background.
I'd go through the app list in the settings menu and close and delete any downloaded apps she doesn't use or recognize.
This my theory, so I’ll give your suggestion a try tonight. I told her to stick to the Apple Arcade since those seem to remove the tracking to stay listed. It’s not ideal but it’s like parents are like having really old kids haha
This is my bet too. But my mom is an airhead and tech conversations with her remind me of that Mom Translator skit from SNL. 😂
If battery life is the issue, start by looking at the drain from each app. Settings > Battery
I’ll give this a check too, I have to wait until she gets home and looses interest in her phone to check it out. I want to block Meta altogether considering it’s mostly ads, but she’d probably go through withdrawals 😵💫
Looking at signalfx.com it seems to be a platform to spy on app/website users, so could be anything. If your block of the domain does not cause the app to malfunction and her to complain, the only way might be to inspect the traffic. But that might require setting up a mitm attack with forged certificates. You might not want to go that far.
Blocked it and she hasn’t complained anything’s broken so far so it’s hard to diagnose at my n00bish skill level. Sadly I don’t know how to set up a mitm attack because it could show the calls. I asked her what she’s doing, she says it’s Facebook. The problem is they continue even when she’s off her phone and I turned almost every Notification off on her phone and she thinks she’s WAYY more savvy than she actually is.
It looks like the image is NextDNS, so chances are it’s how he found out what’s causing the drain. Guessing she isn’t seeing any signs of apps not working but its caused noticeable battery issues. 🤔
I'm not familiar with iOS, but I assume that it's similar to Android, and you can kill an app.
It looks like you have a counter there, which I assume ticks up for each connection.
Make a list of open apps.
Kill the first half of them.
If the counter stops ticking up, it was in that half. If not, it was in the other.
If it was in the half that you killed, kill the running apps.
Now open half of the "still suspect" list.
Repeat what you did above. Each pass eliminates half of the remaining apps, so you should be able to get it in log₂(N), where N is the number of initially running apps.
You’re probably right, I’ll give that a shot tonight. But I think in iOS it’s a feature I have to turn on due to Privacy.
I don’t know if it would do anything, especially if it’s a bad actor, but have you tried turning off background refresh under Settings > General? If completely turning it off makes it stop, you can go through tal’s method to figure out the culprit.
its a monitoring and analytics platform. owned by splunk. could be any app shes installed.
took 20 seconds to search online for the answer.
took me longer to write this reply than to look it up.
While I agree, you’ve gotta realize some people aren’t as technically savvy. So let’s not make this place as hostile as Reddit was.
youre right. i forget how difficult searching for a host name online is. especially difficult for someone self hosting a firewall or pihole, who can then see dns lookups.
super complicated.
Some people don’t do their own tech support bud… They have a cousin or family member who set it up so only know the absolute bare minimum.
Try stepping outside yourself in these situations, if the guy came asking for help means they probably already did the bare minimum and still can’t figure it out and is praying someone more skilled can assist.
Dunno who peed in your cornflakes today, but it doesn’t cost much to try being nice to strangers.
Sure! People who self host a network firewall cant do their own tech support!
Did you try googling EQ?
Dayum, Emotional Quotient? Sick burn.
It's not like your search found anything that could help OP, so what's the point of this attitude?