OKOUSER @ 06/01/17, 23:19
So great, immediately see who listens to the port: what exactly did you have in this tab?
Well, I say - there is either UID 1000 (and under it there are 22 processes with me), or an abstract inscription "Android system", which for me was not obviously equivalent to System_Server
OKOUSER @ 06/01/17, 23:19
But why he does it, the question is more complex: maybe it will have to give it to the network to search for a response, and watch the connections.
For the experiment, I resolved it with access, but I did not notice connections to this port.
In general, the ports are listening to many, for example, Protect My Privacy for some reason listens to the port 10022, FBReader - 12000 well, etc ...
OKOUSER @ 06/01/17, 23:19
And, here it is like, it seems that it is so everywhere things are.
At 5.1 (and Cyanogen 12.1) encryption is fully turned on and after installing XPosed, and here 6.0 (and 13.0) - no. Apparently you need to contribute to "Known Issues" ...