Real Time Crowdsource Crime Dashboard

27 records | Page 1 of 1

Timestamp ▼	MAC ID	Device	Transport	IDS Token	Auth Owner	SameAcct	DirectLink	BLE / AWDL	Tier	Services Called	§ 2511 PhoneCall (14) ▼	Event / Translation
09/09/2026 13:31:56	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	—	—	—	YES	YES	T2 Screen	—	—	— Direct peer-to-peer connection — device within Apple DirectLink operational range view raw log
2026-09-09 13:31:56 \| DirectLink-CLOSE \| MAC: 0F:2B:0D:10:EE:D1 \| DirectLink-CLOSE \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:31:56.324230-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPRemoteDisplayDaemon] Bonjour device lost (changed): EEB54B57-9D2B-41BC-93D5-6F518F8B92BB, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", }
09/09/2026 13:31:55	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	YES	YES	YES	YES	T1 Identity	—	—	Resolved DeviceAuthTag: owner Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold) view raw log
2026-09-09 13:31:55 \| 2026-09-09 13:31:55.327054-0400 0x9acdce3 Info 0x0 639 0 rapportd: (CoreUtils) [com.apple.rapport:RPIdentityDaemon] Resolved DeviceAuthTag: owner, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", } -> RPIdentity, Type SameAccountDevice, IDS 'BBkDRkFj', AccountAltDSID 'BBFwyrwl', AID 'BBpWmIIQ', Nm 'BBqHEqNN', MRI 'BBAcbeat', Md 'BBirKMUm', MRtI 'BBFohcxd', Rev 18, Src 0
09/09/2026 13:31:48	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	—	—	YES	YES	T2 Screen	—	—	— Direct peer-to-peer connection — device within Apple DirectLink operational range view raw log
2026-09-09 13:31:48 \| USB+DirectLink \| MAC: 0F:2B:0D:10:EE:D1 \| USB+DirectLink \| IDS 'BBkDRkFj' \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:31:48.230777-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPRemoteDisplayDaemon] Start connection (Infra) to RPRemoteDisplayDevice, AltDSID 'BBFwyrwl', IDS 'BBkDRkFj', PI 'BBkDRkFj', Nm 'BBqHEqNN', Md 'BBirKMUm', CC 5, SF 0x1880386 < BLE iWiFi Personal DuetSync WiFiP2P Owner ApplePay USB > for service type com.apple.continuitycapture with bonjour device CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >
09/09/2026 13:31:35	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	YES	YES	YES	YES	T1 Identity	—	—	Resolved DeviceAuthTag: owner Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold) view raw log
2026-09-09 13:31:35 \| DirectLink-CLOSE \| MAC: 0F:2B:0D:10:EE:D1 \| DirectLink-CLOSE \| IDS 'BBkDRkFj' \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:31:35.924359-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPIdentityDaemon] Resolved DeviceAuthTag: owner, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", } -> RPIdentity, Type SameAccountDevice, IDS 'BBkDRkFj', AccountAltDSID 'BBFwyrwl', AID 'BBpWmIIQ', Nm 'BBqHEqNN', MRI 'BBAcbeat', Md 'BBirKMUm', MRtI 'BBFohcxd', Rev 18, Src 0
09/09/2026 13:29:40	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	—	—	—	YES	YES	T2 Screen	—	—	— Direct peer-to-peer connection — device within Apple DirectLink operational range view raw log
2026-09-09 13:29:40 \| DirectLink-CLOSE \| MAC: 0F:2B:0D:10:EE:D1 \| DirectLink-CLOSE \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:29:40.272790-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPRemoteDisplayDaemon] Bonjour device lost (changed): EEB54B57-9D2B-41BC-93D5-6F518F8B92BB, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", }
09/09/2026 13:29:39	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	YES	YES	YES	YES	T1 Identity	—	—	Resolved DeviceAuthTag: owner Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold) view raw log
2026-09-09 13:29:39 \| 2026-09-09 13:29:39.258263-0400 0x9abd35d Info 0x0 639 0 rapportd: (CoreUtils) [com.apple.rapport:RPIdentityDaemon] Resolved DeviceAuthTag: owner, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", } -> RPIdentity, Type SameAccountDevice, IDS 'BBkDRkFj', AccountAltDSID 'BBFwyrwl', AID 'BBpWmIIQ', Nm 'BBqHEqNN', MRI 'BBAcbeat', Md 'BBirKMUm', MRtI 'BBFohcxd', Rev 18, Src 0
09/09/2026 13:29:18	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	—	—	YES	YES	T2 Screen	—	—	— Direct peer-to-peer connection — device within Apple DirectLink operational range view raw log
2026-09-09 13:29:18 \| USB+DirectLink \| MAC: 0F:2B:0D:10:EE:D1 \| USB+DirectLink \| IDS 'BBkDRkFj' \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:29:18.308831-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPRemoteDisplayDaemon] Start connection (Infra) to RPRemoteDisplayDevice, AltDSID 'BBFwyrwl', IDS 'BBkDRkFj', PI 'BBkDRkFj', Nm 'BBqHEqNN', Md 'BBirKMUm', CC 5, SF 0x1880386 < BLE iWiFi Personal DuetSync WiFiP2P Owner ApplePay USB > for service type com.apple.continuitycapture with bonjour device CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >
09/09/2026 13:29:03	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	YES	YES	YES	YES	T1 Identity	—	—	Resolved DeviceAuthTag: owner Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold) view raw log
2026-09-09 13:29:03 \| DirectLink-CLOSE \| MAC: 0F:2B:0D:10:EE:D1 \| DirectLink-CLOSE \| IDS 'BBkDRkFj' \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:29:03.634176-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPIdentityDaemon] Resolved DeviceAuthTag: owner, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", } -> RPIdentity, Type SameAccountDevice, IDS 'BBkDRkFj', AccountAltDSID 'BBFwyrwl', AID 'BBpWmIIQ', Nm 'BBqHEqNN', MRI 'BBAcbeat', Md 'BBirKMUm', MRtI 'BBFohcxd', Rev 18, Src 0
09/09/2026 13:28:48	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	—	—	—	YES	YES	T2 Screen	—	—	— Direct peer-to-peer connection — device within Apple DirectLink operational range view raw log
2026-09-09 13:28:48 \| DirectLink-CLOSE \| MAC: 0F:2B:0D:10:EE:D1 \| DirectLink-CLOSE \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:28:48.655210-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPRemoteDisplayDaemon] Bonjour device lost (changed): EEB54B57-9D2B-41BC-93D5-6F518F8B92BB, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", }
09/09/2026 13:28:47	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	—	—	YES	YES	T2 Screen	—	—	— Direct peer-to-peer connection — device within Apple DirectLink operational range view raw log
2026-09-09 13:28:47 \| USB+DirectLink \| MAC: 0F:2B:0D:10:EE:D1 \| USB+DirectLink \| IDS 'BBkDRkFj' \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:28:47.393535-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPRemoteDisplayDaemon] Start connection (Infra) to RPRemoteDisplayDevice, AltDSID 'BBFwyrwl', IDS 'BBkDRkFj', PI 'BBkDRkFj', Nm 'BBqHEqNN', Md 'BBirKMUm', CC 5, SF 0x1880386 < BLE iWiFi Personal DuetSync WiFiP2P Owner ApplePay USB > for service type com.apple.continuitycapture with bonjour device CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >
09/09/2026 13:28:40	0F:2B:0D:10:EE:D1	iPhone~	DirectLink	BBkDRkFj	YES	YES	YES	YES	T1 Identity	—	—	Resolved DeviceAuthTag: owner Device authenticated as account owner via direct peer connection — physical proximity confirmed within Apple DirectLink operational range (~30 ft / -65 dBm RSSI threshold) view raw log
2026-09-09 13:28:40 \| DirectLink-CLOSE \| MAC: 0F:2B:0D:10:EE:D1 \| DirectLink-CLOSE \| IDS 'BBkDRkFj' \| "iPhone~" \| GEO: unavailable \| 2026-09-09 13:28:40.762130-0400 localhost rapportd[639]: (CoreUtils) [com.apple.rapport:RPIdentityDaemon] Resolved DeviceAuthTag: owner, CUBonjourDevice 0F:2B:0D:10:EE:D1, "iPhone~", TT 0x10 < DirectLink >, TXT { "rpBA" : "0F:2B:0D:10:EE:D1", "rpVr" : "715.2", "rpAD" : "de8ce4b1bbeb", } -> RPIdentity, Type SameAccountDevice, IDS 'BBkDRkFj', AccountAltDSID 'BBFwyrwl', AID 'BBpWmIIQ', Nm 'BBqHEqNN', MRI 'BBAcbeat', Md 'BBirKMUm', MRtI 'BBFohcxd', Rev 18, Src 0

Real Time Crowdsource Crime Dashboard

⚠ Swarm Detections — 3+ Unique MACs Within One Hour