Library
Processes, domains, ports, IPs and networks, looked up.
Processes 17
What Is accountsd?
accountsd manages the internet accounts in System Settings › Internet Accounts (iCloud, Google, Microsoft, Exchange and others) and gives apps like Mail, Calendar and Contacts access to them.
What Is apsd?
apsd is the Apple Push Notification service daemon.
What Is cfprefsd?
cfprefsd manages app and system preferences: it reads and writes the .plist files that hold settings, and caches them in memory.
What Is cloudd?
cloudd is the CloudKit daemon.
What Is coreaudiod?
coreaudiod is the Core Audio daemon: it manages audio input and output devices and mixes sound from all apps.
What Is identityservicesd?
identityservicesd runs Apple's Identity Services (IDS), which register your devices and exchange encryption keys for iMessage, FaceTime and device-to-device features like Handoff.
What Is kernel_task on Mac?
kernel_task represents the macOS kernel itself in Activity Monitor: memory management, drivers, and the network stack all run inside it.
What Is mDNSResponder on Mac?
mDNSResponder is macOS's DNS and Bonjour service.
What Is mds_stores?
mds_stores manages the Spotlight index databases: it stores and updates the metadata Spotlight searches.
What Is mdworker?
mdworker (mdworker_shared) extracts metadata and text from files for Spotlight.
What Is netbiosd?
netbiosd is the NetBIOS name service daemon.
What Is nsurlsessiond (and Why Is It Using Data)?
nsurlsessiond is the macOS daemon that runs background downloads and uploads for apps and system services: iCloud Drive and Photos sync, App Store and software updates, podcasts and more.
What Is photoanalysisd?
photoanalysisd analyses your Photos library on your Mac: recognising people, objects and scenes, and creating Memories.
What Is rapportd on Mac?
rapportd is the daemon behind device-to-device communication between your Apple devices: Handoff, Universal Clipboard, AirPlay and Sidecar discovery, and similar Continuity features.
What Is syspolicyd?
syspolicyd enforces Gatekeeper: it checks that apps are signed and notarized before they open, and can check notarization with Apple online.
What Is trustd on Mac?
trustd evaluates certificate trust for macOS: it checks that HTTPS and code-signing certificates chain to a trusted root, and fetches revocation information and missing intermediate certificates.
What Is WindowServer on Mac?
WindowServer draws everything you see: it composites every app's windows, the Dock, the menu bar and animations onto your displays.
Domains 10
What Is 1e100.net?
1e100.net is the domain Google uses to name its servers in reverse DNS.
What Is aaplimg.com?
aaplimg.com is Apple's content delivery network.
What Is akamaitechnologies.com?
akamaitechnologies.com names Akamai's edge servers in reverse DNS (like a23-45-67-89.deploy.static.akamaitechnologies.com).
What Is amazonaws.com?
amazonaws.com hosts Amazon Web Services endpoints: S3 storage (*.s3.amazonaws.com), EC2 servers (ec2-…compute.amazonaws.com) and service APIs.
What Is cloudfront.net?
cloudfront.net is Amazon CloudFront's content delivery network.
What Is doubleclick.net?
doubleclick.net is Google's advertising domain, used for serving ads and measuring them: ad requests, conversion tracking and cookies for ad targeting..
What Is fbcdn.net?
fbcdn.net is Meta's content delivery network for Facebook, Instagram, Messenger and WhatsApp media: photos, videos and static files..
What Is googlesyndication.com?
googlesyndication.com serves Google AdSense ads, the ads website owners place on their pages.
What Is googleusercontent.com?
googleusercontent.com serves content that users and apps put on Google: Drive and Docs files, Gmail image proxying, Photos, Sites, and the reverse DNS names of Google Cloud virtual machines.
What Is gstatic.com?
gstatic.com serves Google's static content: images, fonts (fonts.gstatic.com), scripts and the connectivity check (connectivitycheck.gstatic.com) used by Android and Chrome.
Apps 1
IP addresses 10
0.0.0.0: What It Means
0.0.0.0 means “no particular address”.
1.1.1.1: Cloudflare's DNS Resolver
1.1.1.1 is Cloudflare's public DNS resolver, launched in 2018 with a focus on speed and privacy.
10.0.0.1: Router Login (Xfinity and Others)
10.0.0.1 is a private IP address used as the router address on 10.0.0.0/24 networks.
127.0.0.1: The Loopback Address
127.0.0.1 is the IPv4 loopback address: it always means this computer.
192.168.0.1: Router Login and Admin Page
192.168.0.1 is a private IP address that many routers use as their own address on a 192.168.0.0/24 network.
192.168.1.1: Router Login and Admin Page
192.168.1.1 is a private IP address that many home routers use for themselves: the default gateway of a 192.168.1.0/24 network.
192.168.1.254: Router Login (AT&T and Others)
192.168.1.254 is a private IP address used as the gateway address by AT&T internet gateways in the US and BT Home Hubs in the UK, among others..
255.255.255.255: The Broadcast Address
255.255.255.255 is the limited broadcast address: a packet sent to it reaches every device on the local network segment, and routers never forward it..
8.8.8.8: Google Public DNS
8.8.8.8 is Google Public DNS, one of the most widely used DNS resolvers, running since 2009.
9.9.9.9: Quad9 DNS
9.9.9.9 is Quad9, a non-profit public DNS resolver based in Switzerland that blocks domains known to host malware and phishing.
Ports 13
Port 123: What It Is Used For (NTP)
Port 123 is NTP, the Network Time Protocol that keeps clocks accurate.
Port 21: What It Is Used For (FTP)
Port 21 is the control channel of FTP, the old, unencrypted file-transfer protocol. Data moves over separate ports.
Port 22: What It Is Used For (SSH)
Port 22 is SSH: secure remote login, file transfer (scp, sftp) and Git over SSH.
Port 25: What It Is Used For (SMTP)
Port 25 is SMTP between mail servers. Home ISPs usually block it outbound to stop spam; mail apps send through 587 instead.
Port 3306: What It Is Used For (MySQL)
Port 3306 is the default port of MySQL and MariaDB database servers.
Port 3389: What It Is Used For (RDP)
Port 3389 is Microsoft's Remote Desktop Protocol, used to control Windows PCs and servers remotely.
Port 443: What It Is Used For (HTTPS)
Port 443 carries HTTPS, the encrypted web traffic behind almost every website and app. UDP 443 is used by HTTP/3 (QUIC).
Port 53: What It Is Used For (DNS)
Port 53 is DNS: queries that turn names into IP addresses. Most go over UDP; large answers and zone transfers use TCP.
Port 5432: What It Is Used For (PostgreSQL)
Port 5432 is the default port of PostgreSQL database servers.
Port 587: What It Is Used For (SMTP submission)
Port 587 is mail submission: your mail app sending outgoing email to your provider, with authentication and STARTTLS.
Port 80: What It Is Used For (HTTP)
Port 80 is unencrypted HTTP. Today it mostly redirects visitors to HTTPS on port 443, and serves captive portals and certificate checks.
Port 8080: What It Is Used For (HTTP alternate)
Port 8080 is the most common alternative HTTP port, used by development servers, proxies and admin interfaces.
Port 993: What It Is Used For (IMAPS)
Port 993 is IMAP over TLS: mail apps reading and syncing your mailbox securely.
ISPs 5
AT&T DNS Servers, CGNAT and IPv6
AT&T's residential DNS resolvers are 68.94.156.1 and 68.94.157.1. AT&T Fiber gets a public IPv4 address and IPv6; AT&T Internet Air (fixed wireless) uses CGNAT.
Comcast Xfinity DNS Servers, CGNAT and IPv6
Comcast Xfinity's DNS resolvers are 75.75.75.75 and 75.75.76.76 (IPv6 2001:558:feed::1 and ::2). Home connections get a public IPv4 address and native IPv6.
Spectrum DNS Servers, CGNAT and IPv6
Spectrum (Charter) hands out regional DNS resolvers such as 71.10.216.1 / .2 or, in former Time Warner Cable areas, 209.18.47.61 / .62. Standard home internet gets a public IPv4 address.
Starlink CGNAT, DNS and IPv6
Starlink residential plans use carrier-grade NAT for IPv4 (addresses in 100.64.0.0/10, no inbound connections) and provide a public IPv6 /56 prefix.
Verizon DNS Servers, CGNAT and IPv6
Verizon Fios uses regional DNS resolvers like 71.250.0.12 and 71.242.0.12. Fios gets a public IPv4 address; Verizon 5G Home and LTE Home use CGNAT.
CIDR prefixes 25
/10 Subnet: 255.192.0.0, 4,194,302 Usable Hosts
A /10 has subnet mask 255.192.0.0 and 4,194,304 addresses.
/11 Subnet: 255.224.0.0, 2,097,150 Usable Hosts
A /11 has subnet mask 255.224.0.0 and 2,097,152 addresses.
/12 Subnet: 255.240.0.0, 1,048,574 Usable Hosts
A /12 has subnet mask 255.240.0.0 and 1,048,576 addresses.
/13 Subnet: 255.248.0.0, 524,286 Usable Hosts
A /13 has subnet mask 255.248.0.0 and 524,288 addresses.
/14 Subnet: 255.252.0.0, 262,142 Usable Hosts
A /14 has subnet mask 255.252.0.0 and 262,144 addresses.
/15 Subnet: 255.254.0.0, 131,070 Usable Hosts
A /15 has subnet mask 255.254.0.0 and 131,072 addresses.
/16 Subnet: 255.255.0.0, 65,534 Usable Hosts
A /16 has subnet mask 255.255.0.0 and 65,536 addresses.
/17 Subnet: 255.255.128.0, 32,766 Usable Hosts
A /17 has subnet mask 255.255.128.0 and 32,768 addresses.
/18 Subnet: 255.255.192.0, 16,382 Usable Hosts
A /18 has subnet mask 255.255.192.0 and 16,384 addresses.
/19 Subnet: 255.255.224.0, 8,190 Usable Hosts
A /19 has subnet mask 255.255.224.0 and 8,192 addresses.
/20 Subnet: 255.255.240.0, 4,094 Usable Hosts
A /20 has subnet mask 255.255.240.0 and 4,096 addresses.
/21 Subnet: 255.255.248.0, 2,046 Usable Hosts
A /21 has subnet mask 255.255.248.0 and 2,048 addresses.
/22 Subnet: 255.255.252.0, 1,022 Usable Hosts
A /22 has subnet mask 255.255.252.0 and 1,024 addresses.
/23 Subnet: 255.255.254.0, 510 Usable Hosts
A /23 has subnet mask 255.255.254.0 and 512 addresses.
/24 Subnet: 255.255.255.0, 254 Usable Hosts
A /24 has subnet mask 255.255.255.0 and 256 addresses.
/25 Subnet: 255.255.255.128, 126 Usable Hosts
A /25 has subnet mask 255.255.255.128 and 128 addresses.
/26 Subnet: 255.255.255.192, 62 Usable Hosts
A /26 has subnet mask 255.255.255.192 and 64 addresses.
/27 Subnet: 255.255.255.224, 30 Usable Hosts
A /27 has subnet mask 255.255.255.224 and 32 addresses.
/28 Subnet: 255.255.255.240, 14 Usable Hosts
A /28 has subnet mask 255.255.255.240 and 16 addresses.
/29 Subnet: 255.255.255.248, 6 Usable Hosts
A /29 has subnet mask 255.255.255.248 and 8 addresses.
/30 Subnet: 255.255.255.252, 2 Usable Hosts
A /30 has subnet mask 255.255.255.252 and 4 addresses.
/31 Subnet: 255.255.255.254, 2 Usable Hosts
A /31 has subnet mask 255.255.255.254 and 2 addresses.
/32 Subnet: 255.255.255.255, 1 Usable Host
A /32 has subnet mask 255.255.255.255 and 1 addresses.
/8 Subnet: 255.0.0.0, 16,777,214 Usable Hosts
A /8 has subnet mask 255.0.0.0 and 16,777,216 addresses.
/9 Subnet: 255.128.0.0, 8,388,606 Usable Hosts
A /9 has subnet mask 255.128.0.0 and 8,388,608 addresses.