As Diddy mentions above, it seems like the actions of malware. There are some nowadays that can root your phone & then uninstall themselves after opening ports or whatever, so even when a root check comes up clean you may have been compromised. Also, check your Google account, any log ins from...