Some quick explanations of non-obvious ones: mesu, su: software update pancake: looks like home sharing? https://stackoverflow.com/questions/26900625/what-is-

Some quick explanations of non-obvious ones: mesu, su: software update pancake: looks like home sharing? https://stackoverflow.com/questions/26900625/what-is-pancake-apple-com https://stackoverflow.com/questions/26900625/what-is-pancake... phobos, mzstatic: App/iTunes store, possibly also Apple Music apptrailers: App Store app demo videos? streamingaudio: Apple Music? iphonesubmissions, radarsubmissions: crash report upload guzzoni: Siri appldwnld: firmware downloads gs: firmware signature generator/verifier albert: device activation ckdatabase, ckdevice: CloudKit, like iCloud 2.0 keyvalueservice: old iCloud sync service, still used with text shortcuts sync fmf: Find My Friends fmip: Find My iPhone All in all just looks normal, there's a lot of features in iOS/macOS/iTunes etc etc and they all have their own respective hostnames, possibly many for old school random-hostname-based load balancing, etc. Seems pretty normal that your users would be downloading apps (or the phone downloading updates automatically), playing Apple Music, updating iOS, etc. Spammy, but not that big a deal. I'd imagine rather similar from Android by filtering to Google, Samsung, etc hosts.