I know my iphones been compromised I just need confirmation

[Leeman77]

I never authorized or chose to airplay anything ever and I’m aware of how to do it. I also do not have any other devices that access my phone through apps. I have never given out my password either in any way to anything. So I’m curious as to the remote connections, the airplay , the sessions, a lot of very suspicious activity and I just need confirmation that my iphones been compromised or a breakdown of what all of this data means exactly to make sense of it because it doesn’t.

timestamp":"2019-12-08 17:53:17.52 -0800","bug_type":"224","os_version":"iPhone OS 12.4.3 (16G130)","incident_id":"87308395-C495-413F-BAA2-885C1F2C0242"}

(2019-12-09 01:53:17 +0000) [splunk -> flushMessages] {

"postTime" : 1575856396.6946881,

"events" : [

{

"_startTS" : 1575856380,

"Locale" : "US",

"_internal" : 0,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_productFamily" : "iPhone",

"AutomaticTimeSet" : true,

"eventTime" : 1575856380.001349,

"_timezoneOffset" : -28800,

"_reportVers" : "9.50.2",

"_clientName" : "AirPlaySender",

"_clientTS" : 1575856380.001349,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 1,

"_status" : 0,

"_osVersion" : "12.4.3",

"_sessionID" : "OaeRCcExSLSZV6EjY\/RczA==",

"_method" : 0,

"_sender" : "ARPL"

},

{

"_startTS" : 1575856380,

"infraRSSI" : -15,

"_internal" : 0,

"durationMs" : 3354,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_productFamily" : "iPhone",

"eventTime" : 1575856380.0030339,

"_timezoneOffset" : -28800,

"_reportVers" : "9.50.2",

"_clientName" : "AirPlaySender",

"_clientTS" : 1575856380.0030339,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 2,

"sessionType" : "Discovery",

"_status" : 1,

"_osVersion" : "12.4.3",

"infraCCA" : 5,

"_sessionID" : "OaeRCcExSLSZV6EjY\/RczA==",

"_sender" : "ARPL",

"_method" : 100

},

{

"StorebagsCount" : 3,

"OverrideSampling" : -1,

"_startTS" : 1575856380,

"SamplingThreshold" : 0.01,

"SessionsCount_ARPL" : 1,

"BatchSize_ARPL" : 800,

"CalculatedMemoryUsage" : 304336,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_internal" : 0,

"GracefulTermination" : true,

"_totalBytesSent" : 0,

"Batch" : 1,

"ProcessMemoryUsage" : 1404928,

"eventTime" : 1575856380.027812,

"_productFamily" : "iPhone",

"_reportVers" : "9.50.2",

"_timezoneOffset" : -28800,

"_clientName" : "AirPlaySender",

"_clientTS" : 1575856380.027812,

"Opt" : 0,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 3,

"_status" : 1,

"StorebagsSize" : 303536,

"_method" : 0,

"_sessionID" : "OaeRCcExSLSZV6EjY\/RczA==",

"_osVersion" : "12.4.3",

"_sender" : "ARPL",

"StorebagVersion" : "e20b787ecdec"

}

]

}

(2019-12-09 03:56:30 +0000) [splunk -> flushMessages] {

"postTime" : 1575863789.0247891,

"events" : [

{

"_startTS" : 1575863760,

"Locale" : "US",

"_internal" : 0,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_productFamily" : "iPhone",

"AutomaticTimeSet" : true,

"eventTime" : 1575863760.0033,

"_timezoneOffset" : -28800,

"_reportVers" : "9.50.2",

"_clientName" : "AirPlaySender",

"_clientTS" : 1575863760.0033,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 1,

"_status" : 0,

"_osVersion" : "12.4.3",

"_sessionID" : "GZCzAuZPTQ21Wyt7O4x1Zg==",

"_method" : 0,

"_sender" : "ARPL"

},

{

"_startTS" : 1575863760,

"infraRSSI" : -15,

"_internal" : 0,

"durationMs" : 34848,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_productFamily" : "iPhone",

"eventTime" : 1575863760.011677,

"_timezoneOffset" : -28800,

"_reportVers" : "9.50.2",

"_clientName" : "AirPlaySender",

"_clientTS" : 1575863760.011677,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 2,

"sessionType" : "Discovery",

"_status" : 1,

"_osVersion" : "12.4.3",

"infraCCA" : 5,

"_sessionID" : "GZCzAuZPTQ21Wyt7O4x1Zg==",

"_sender" : "ARPL",

"_method" : 100

},

{

"BatchSize_CM-HLS" : 0,

"GracefulTermination" : true,

"_productFamily" : "iPhone",

"_totalBytesSent" : 0,

"_sessionID" : "GZCzAuZPTQ21Wyt7O4x1Zg==",

"eventTime" : 1575863760.081588,

"_status" : 1,

"_method" : 0,

"Batch" : 1,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"SamplingThreshold" : 0.01,

"BatchSize_ARPL" : 800,

"CalculatedMemoryUsage" : 304336,

"_internal" : 0,

"StorebagsSize" : 303536,

"OverrideSampling" : -1,

"_osVersion" : "12.4.3",

"_clientName" : "AirPlaySender",

"_eventNumber" : 3,

"StorebagVersion" : "e20b787ecdec",

"_sender" : "ARPL",

"_clientVersion" : 1,

"Opt" : 0,

"_serviceName" : "iPhone",

"_timezoneOffset" : -28800,

"SessionsCount_CM-HLS" : 2,

"StorebagsCount" : 3,

"_reportVers" : "9.50.2",

"ProcessMemoryUsage" : 1437696,

"_startTS" : 1575863760,

"SessionsCount_ARPL" : 1,

"_clientTS" : 1575863760.081588

}

]

}

(2019-12-09 06:46:08 +0000) [splunk -> flushMessages] {

"postTime" : 1575873967.5981729,

"events" : [

{

"_startTS" : 1575873960,

"Locale" : "US",

"_internal" : 0,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_productFamily" : "iPhone",

"AutomaticTimeSet" : true,

"eventTime" : 1575873960.0015211,

"_timezoneOffset" : -28800,

"_reportVers" : "9.50.2",

"_clientName" : "AirPlaySender",

"_clientTS" : 1575873960.0015211,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 1,

"_status" : 0,

"_osVersion" : "12.4.3",

"_sessionID" : "Maf7WOhWSyqeJofUHCxCxw==",

"_method" : 0,

"_sender" : "ARPL"

},

{

"_startTS" : 1575873960,

"infraRSSI" : -15,

"_internal" : 0,

"durationMs" : 15836,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_productFamily" : "iPhone",

"eventTime" : 1575873960.002852,

"_timezoneOffset" : -28800,

"_reportVers" : "9.50.2",

"_clientName" : "AirPlaySender",

"_clientTS" : 1575873960.002852,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 2,

"sessionType" : "Discovery",

"_status" : 1,

"_osVersion" : "12.4.3",

"infraCCA" : 5,

"_sessionID" : "Maf7WOhWSyqeJofUHCxCxw==",

"_sender" : "ARPL",

"_method" : 100

},

{

"StorebagsCount" : 1,

"OverrideSampling" : -1,

"_startTS" : 1575873960,

"SamplingThreshold" : 0.01,

"SessionsCount_ARPL" : 1,

"BatchSize_ARPL" : 800,

"CalculatedMemoryUsage" : 89280,

"_productModel" : "iPhone7,2",

"_build" : "16G130",

"_internal" : 0,

"GracefulTermination" : true,

"_totalBytesSent" : 0,

"Batch" : 1,

"ProcessMemoryUsage" : 884736,

"eventTime" : 1575873960.0056,

"_productFamily" : "iPhone",

"_reportVers" : "9.50.2",

"_timezoneOffset" : -28800,

"_clientName" : "AirPlaySender",

"_clientTS" : 1575873960.0056,

"Opt" : 0,

"_clientVersion" : 1,

"_serviceName" : "iPhone",

"_eventNumber" : 3,

"_status" : 1,

"StorebagsSize" : 88480,

"_method" : 0,

"_sessionID" : "Maf7WOhWSyqeJofUHCxCxw==",

"_osVersion" : "12.4.3",

"_sender" : "ARPL",

"StorebagVersion" : "e20b787ecdec"

}

]

}

 

[Leeman77]

Here’s proof right here ppl are logging into my account hacking my **** period I don’t own a mac AND THEYLL TRY TO DELETE THIS POST

 

[Apple_Robert]

I don’t see anything untoward in your opening post.

Change the password on your Google account and turn on 2FA.

 

[Airforcekid]

Couple of things. First update your iPhone to iOS 13 if your concerned about security and check for any profiles that may have installed randomly on your device. Second get a good adblocker such as AdGuard and enable it in Safari or a browser like Brave or DuckDuckGo. Third get a VPN Cloudflares 1.1.1.1 is free and works well for me but ProtonVPN and Mullvad are also good options if you want to pay. Fourth change your Google (And other sites) password and enable 2FA. If you have a desktop or laptop/iPad repeat the steps I mentioned on it.