See Which App Is Using Internet on Mac

Find the Mac app behind upload or download activity, then inspect its remote connections before deciding whether to allow, ignore, or block it.

How can you see which app is using the internet on Mac?

To see which app is using the internet on Mac, use a per-app network monitor that groups traffic by application, shows live speed, and exposes connection details. iNTM helps connect each spike to the app, remote endpoint, port, protocol, and history behind it.

  • Find the app causing upload or download spikes
  • Separate normal sync activity from unusual background traffic
  • Check remote domains and IP addresses
  • Use firewall rules when an app should not connect

Find the app behind a network spike

  1. Watch the real-time traffic view

    Start when you notice a speed spike in the menu bar or dashboard.

  2. Compare applications in Traffic Monitor

    Open iNTM Traffic Monitor, choose a time range, and compare application chart items. Select the app with unexpected activity to open its connection panel.

  3. Open the connection details

    Read the selected app's connection entries, including remote address, port, protocol, and sent or received bytes. A browser tab or cloud sync may explain a high value.

    iNTM Traffic Monitor showing per-app network usage and selected app connections
    Select an application in the traffic chart to see its connection detail panel.
  4. Compare with history

    Look for repeated behavior so you do not overreact to a normal one-time update.

  5. Decide whether to allow or block

    If the connection is unwanted, create a local app firewall rule that targets the right app or endpoint.

Download iNTM Mac Network Monitor

Common reasons an app uses bandwidth

Not every traffic spike is suspicious. Cloud sync, software updates, media playback, telemetry, browser tabs, and developer tools can all use bandwidth in the background. The goal is to identify the app first, then decide whether the behavior makes sense.

  • Cloud storage sync or backup
  • Browser tabs with video or live dashboards
  • App updates, telemetry, or background refresh

What to check before blocking an app

Before creating a firewall rule, inspect whether the endpoint belongs to a service the app actually needs. Blocking too broadly can break login, sync, update checks, or real-time collaboration features.

  • Does the domain match the app or service?
  • Is the traffic repeated or a one-time event?
  • Can a domain or port rule solve it more cleanly than blocking the whole app?

Finding app internet usage FAQ

Can macOS show internet usage by app?

macOS has basic tools, but iNTM is designed for ongoing per-app traffic monitoring with history, endpoint details, and local firewall control.

Can I see background app traffic?

Yes. iNTM helps reveal background traffic by showing app-level upload and download activity together with connection details.

Can I block only one app after finding it?

Yes. iNTM can create local firewall rules around a specific app, domain, IP address, port, or protocol.

Go deeper after identifying the app

macOS Network Traffic Monitor

See how iNTM connects app traffic, endpoint inspection, and history.

Mac Network Monitor