Rapportd constantly asking for incoming connection on my iMac running macOS 13.7.3

I'm running MacOS 13.7.3. For the last few days I've been getting constant alerts from Little Snitch regarding rapportd wanting to accept an incoming connection. The addresses are always similar. I've pasted one such request below. I did a reverse IPv6 lookup and the address traces to a Verizon location in Virginia. I'm in Long Island. Any idea why these requests would start suddenly and should I deny them?


-------

rapportd wants to accept an incoming connection from 2600:4040:995d:9a00:9998:c42c:79ae:37a9


[Re-Titled by Moderator]

Original Title: rapportd constantly asking for incoming connection

iMac 27″, macOS 13.7

Posted on Aug 20, 2025 9:31 AM

Reply
Question marked as Top-ranking reply

Posted on Aug 26, 2025 8:34 AM

MrHoffman wrote:

For anything reported by, related to, detected by, blocked by, claimed to happen by, or otherwise involving or associated with this app, please contact the app vendor. They are your point of contact for this app, and for anything this app reports, alters, claims, or causes, including any undocumented or unsupported activities.

Or you can remove this Little Snitch app, and return to a configuration that operates as Apple expects.

If you want to persist wirh the app, allow all connections.

rapportd is a daemon associated with a macOS private framework, and is part of normal operations. The rapport framework is associated with Apple continuity and iCloud-related features, as well as with Siri and Bonjour activity based in the private framework headers.

A second and likely-unrelated-to-this-case rapportd is part of an IBM Trusteer package.

Beyond the country level, IP geolocation is inaccurate at best, assuming the add-on tool is reporting correct info.

I would, however, be cautious about posting public IPv6 addresses.

And I’d wonder if this IPv6 address is associated with your own host or your own local network, whether that network is run by Verizon or otherwise, or as is reported to be located in Virgina, New York, Maryland, or elsewhere.

I'l reach out to Little Snitch to see if they have any insight as to this particular incoming request. I'm familiar with what rapportd is and what it does. As I mentioned previously, it just seemed strange that all of a sudden 'something' would start trying to connect to it. As this thread moved along and I dug a little deeper it does seem that the IPv6 address is associated with my router as it is provided by Verizon.


LS appears to be a very polarizing app. Some people hate it, but others find it valuable. It's served me well over the years.

19 replies

Aug 26, 2025 3:23 AM in response to chris catalano

For anything reported by, related to, detected by, blocked by, claimed to happen by, or otherwise involving or associated with this app, please contact the app vendor. They are your point of contact for this app, and for anything this app reports, alters, claims, or causes, including any undocumented or unsupported activities.


Or you can remove this Little Snitch app, and return to a configuration that operates as Apple expects.


If you want to persist wirh the app, allow all connections.


rapportd is a daemon associated with a macOS private framework, and is part of normal operations. The rapport framework is associated with Apple continuity and iCloud-related features, as well as with Siri and Bonjour activity based in the private framework headers.


A second and likely-unrelated-to-this-case rapportd is part of an IBM Trusteer package.


Beyond the country level, IP geolocation is inaccurate at best, assuming the add-on tool is reporting correct info.


I would, however, be cautious about posting public IPv6 addresses.


And I’d wonder if this IPv6 address is associated with your own host or your own local network, whether that network is run by Verizon or otherwise, or as is reported to be located in Virgina, New York, Maryland, or elsewhere.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Rapportd constantly asking for incoming connection on my iMac running macOS 13.7.3

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.