Database Develop

Strange data issues. How to track down malicious apps?

Alright, I really need some help from the big boys here.
I have had my N1 since release. I have T-Mobile and no data plan. Everything I do is over wifi.
On Friday, I saw the 3g icon on my phone for the first time. It appeared out of nowhere and just flips between 3G and E since T-Mobile just blocks data for non-plan users. This was killing the battery life of the phone.
I called Google and they ran me through *#*#4636#*#* to disable the data connection. This fixed the problem for a while; However after a while the phone will give a message that there is no service provider and will reconnect to T-Mobile (it has never done this before outside of phone boots). When it is back up the 3G/E cycling starts again. Even worse the data connection still lists as disabled and will not re-enable. I have to pop the battery out while it is running to get back in to disable it.
Google thinks its an app but I have removed everything but Touchdown and K9 which I don't think are the problem. I have used Android OS Monitor and I do see connections to 64.15.75.218 and 209.44.107.13 which are hot beds for malware and when I uninstall any app these connections vanish temporarily. But they come back after a few hours.
Anyone seen this before or know a way to track IP connections to a particular app?

I have no solution for tracing 'malicious' software but it is possible to just disable all mobile data usage.
Settings/Wireless and network settings/ Mobile networks > "Data enabled"
If you unselect this there should be no more data transfer while on the mobile network.

I do not have that option. Google Rep said it was only in froyo.
Problem is I did the same thing for 2.1 but it keeps coming back on. Even with wifi the phone connects to these ips so who knows what it is doing.

3G isn't used only for data, you can do voice on 3G.
Could be T-Mobile expanding 3g into your are where you didn't have coverage before.
Call T-Mobile and make sure you're not actually using data.
As for tracking applications, you can use System Panel Pro of the market to monitor how much data applications are using.

I know I am not using data. The T-Mobile account page is pretty detailed and I am unable to do anything online when wifi is off. 3G has also been available for a while here as I know others that use it.
I will check out system panel.
Thanks.

UmbraeSoulsbane said:
I do not have that option. Google Rep said it was only in froyo.
Click to expand...
Click to collapse
It is indeed only on Froyo, however, Froyo is out now, so install it and you'll instantly benefit.

A few more things:
Were you receiving or sending MMS (picture/video messages) when the 3G icon popped up? This is normal and doesn't usually come out of your data balance.
If you'd like to be triple-sure you're not using data, go into the APN settings. Edit the APN name - e.g. change tmobile.com to nomobile.com. Now it *really* shouldn't be able to access data.

Smarphones would be well to do to have a Zonealarm/little snitch type app for this purpose.
Id imagine ad based apps wouldnt be too happy about it. At the least an app that reports IPs times , and IN/OUT info.

I never use SMS or mms and have not gotten any during this time.
My concern is not related to getting charges but with unwanted use of my phone or data. When the data connection auto enables it will go through my battery in a matter or hours and who knows what the phone may be doing.
I know I can turn this off and make sure data is not used - in fact I have already done this. However when smoke enters room you don't just put a towel under the door and forget about it. I want to find the source of this and stop it because the behavior is not normal.
I agree something like zone alarm would be good. You should be able prevent or track an app activities for situations like this. If I knew what was connecting to these IPs and enabling the data connection I could stop it and report the app or submit a bug request. Right now I am just all alone.
I did try system panel which seems like a nice app but it does not give me good information on network usage by app. OSMonitor is better at connection monitoring but doesn't list by app. Why has no one thought to monitor network threads by app?

Try alogcat maybe? Any time you notice the icon suddenly appearing, save a copy of the logcat and comb through it.

alogcat may work. Figured out OSMonitor had something similar and filtered by app.
Now I just gotta wait I guess. Still not enough info to relate to IP though.

You should know that the data connection setting isn't an enforcement for the entire phone. It only acts as a notice to applications on whether or not to use data in the background.
Developers are supposed to respect those settings, but they are not enforced.

There is a free program called Network Statistics which is no longer in the market. I will backup the apk for you and upload it so you can use it. It shows the amount of data used by each app.
I too had a data hungry app issue and this helped me solve it immediately.
I'm just at work ATM, so I'll do it this evening. (Almost midday now here in Australia )
Cheers,
Ross

@JCopernicus
I am aware of this which is why I want to track this problem down.
@Ross
That sounds great. I appreciate the help. Not sure if tracking data usage is enough since I don't think the app is sending a lot of data. But I am willing to try anything.
I should be getting froyo soon so maybe that will help as well.

This is what I do when I want to ensure I don't use Data. Go I. To wireless connections. Mobile Networks, and then access points. Create a new one. I usually call it No Data. The for the apn, I just make something dumb, like no.data.com, and then save. After I'll select that as my apn.

The issue is not about the use of the data connection. I have done this and can guarantee the phone cannot use any cell data network. The problem is an app is trying to use it anyway even when it is disabled. Even if you ignore that as a concerning activity the constant 3G searching reduces the battery life to a mere hours.
I appreciate the help, but my issue is not with how to disable the data connection. Its about identifying malware on my device, and tracking an app calls to a specific IP.

Again,k 3g doesn't mean data. 3g is also used for voice.
If you only want to use "2g" switch your phone over to gsm only through 4636 or through the menu where it says "use 2g only".
You will never see the 3g icon again.
If you wan't to be 100% sure no app is calling an IP, then do a factory reset. Install apps one by one, monitor them through the various options given in this thread already.
You will not be able to prevent an application from "calling home" unless you modify the app itself. Apps use the data connection provided to them by the OS however they see fit.
Every app you install has a permissions prompt that will tell you it want's internet access.

JCopernicus said:
Again,k 3g doesn't mean data. 3g is also used for voice.
Click to expand...
Click to collapse
The Android "3G", "H", "E" or "G" icon denotes data. It may also appear temporarily when making the connection necessary to transmit MMS. It does not appear when the phone is using voice over 3G without a data connection.

Actually, this may be a T-Mobile issue - they just enabled the ability to do "pay as you go" data on ALL plans without a data plan, so they may be the ones turning on the ability to do data. You'd still need to authorize it in your browser, and I think it costs about $1/1MB so it is totally not worth it.
May be worth looking into because it wouldn't surprise me if their new "service" is screwing things up.

I am aware of 3G voice but the 3G status icon is related to data flow. I have had the phone since launch and posted this because this behavior is not normal. Even Google was perplexed by what it is doing. And as I said it is not constrained by the 4636 settings.
And I disagree that an app can use the network connection as they see fit. Rights are given to perform its intended purpose; anything else is malicious.

How to turn off data?

When I had my Aria, I could turn off the data connection but I cannot find the setting on the captivate.
Any ideas?
Sent from my SAMSUNG-SGH-I897 using XDA App

Bump
Sent from my SAMSUNG-SGH-I897 using XDA App

I would also love to know how to turn off the 3G data so I can be 100% positive that I'm not eating all of my monthly allotment when I think I'm on wifi

I use "APN on-off Widget" from the market. It's a simple 1x1 widget that allows you to enable and disable APN (data) connectivity with a single tap. It's color coded green/red for data on/off.

There are a few apps that can do this for you. Here is one of them: http://www.appbrain.com/app/com.DataOnOff

Neither seem to work. :/
Sent from my SAMSUNG-SGH-I897 using XDA App

Have you tried APNdroid or SMODA Widget?

Gonna try now
Sent from my SAMSUNG-SGH-I897 using XDA App

Download "network" app from the market place. Start the app, press menu, and press disable data. Works great for me. Would prefer an edge only option.

when by a wifi connection, can you just connect to the wifi connection to disable data?

When I first got my phone, came home, and connect to my wifi, it was showing the 3g icon next to the wifi icon for like a day and a half. Then for some reason, I had to power the phone completely off and back on again. So, now it just shows the wifi icon when I'm at home, and switches properly to 3g when I go out.

Been looking around for awhile (almost last two years!)
My favorite app/widget for controlling all sorts of things on the device (including data) is:
Extended Controls
Frigging AWESOME - not related to them or anything - just a fan of the app.
I use it and have TWO of their widgets full of controls on one screen!

This is my first post ever to a forum. So, hopefully this comes out ok.
Just picked up my Captivate yesterday and was trying to figure this out also. Found a post by someone, can't remember from where, to go Settings, Wireless and network, Mobile networks, Access Point Names and then add a bogus APN. I named mine OFF. Once you have a bogus APN then select it instead of the ATT WAP. Well, tried this and it didn't work, still had icon at top for mobile data and was transferring data. That is until I got to messing around trying out some the settings and I happen to activate Flight mode, still had bogus APN selected. Then once I turned Flight mode back off the icon was gone and no more data transfer from mobile network. Then when I wanted to turn mobile data back on just went back and selected ATT WAP and the icon popped back in and connected to mobile network.

Extended Controls offers an APN toggle that works very well, and it's not a bad looking widget either.

Undocumented Debug/Diagnostic Menus In Your Android Phone - I found this at: TechSupportAlert
From your Android phone, dial *#*#4636#*#* and then wait a couple of seconds. The testing menu will appear. To exit back to your normal phone, just press your back/exit button. If you're going to explore the various options on the testing menu, take care.
As for the method to turn off data, select the first option on the testing menu (phone information), then press your menu key. You'll see a selection of buttons, one of which says "disable data connection". Press it, and you're all done. To re-enable your data connection, go to the same menu, where you'll find that the name of the button is now "enable data connection".
I tried it on my GT-P1000 and it worked perfectly.
Just in case it helps?

If you are running stock FroYo there is a data connection in the power menu. Hold the power button, and press Data Network. It wasn't there in Eclair, but they added it in FroYo. If I remember right it will even remain disabled after a reboot. I can't test as my phones are no longer stock, but my wife once thought she broke her captivate because she accidentally toggled that.
Sent from my Captivate running Continuum 5.5

From the home screen hit the menu button.
Settings>Wireless and Networks>Mobile Data>Use Packet Data.
Uncheck Use Packet Data
Sent from my SAMSUNG-SGH-I897 using XDA App

Airplane mode and wifi?
Am I missing something in my quick review of this thread?
I am going to Europe and dont want any service at all except for wifi.
Cant I just enable airplane mode and then turn on the wifi? Or will those sneaky bastards at ATT find a way to still charge me for something?

FireRaider said:
Am I missing something in my quick review of this thread?
I am going to Europe and dont want any service at all except for wifi.
Cant I just enable airplane mode and then turn on the wifi? Or will those sneaky bastards at ATT find a way to still charge me for something?
Click to expand...
Click to collapse
Just leave your sim card out of the phone then there is no possible way to "sneak charges"...
wifi works with no sim. And you will get kick ass battery life without it.

I am in Venice now after a week in Paris and leaving the phone in airplane mode seems to be doing the trick. But let me just say, hotel wifi in Europe sucks! Its nothing like the states. You get a user name and a password and have to log in every single time. And only one user at a time. I need a wifi repeater or something to use my laptop, iPod, and phone as I want to.
sent from XDA app

[Q] Rogue Robots

I am on my second T-Mo LG G4. Both have exhibited a strange behavior that is rather annoying. I've disabled all automatic sync features and the like - in the same manner as I've done successfully with both a Nexus 5 and a LS990 G3.
So here's the issue(s):
1) Whenever I boot the phone - it automatically turns mobile on. e.g. as indicated by "Data Enabled" quick toggle or the Android Setup slider control.
2) Most times when I enable WiFi, the phone (or whatever) systematically turns on mobile data again - and it's damn repeatable e.g. at ~ 15 seconds after I tap the WiFi quick toggle.
3) Most times when I am running off of WiFi, the mobile data will randomly come on by itself even after I hammered it off that first time in response to manually turning on WiFi.
Zero technical assistance from the obvious sources. LG points the finger at T-Mo. T-Mo points the finger at LG.
I'm starting to think this is related to the Lollipop API change crammed down everyone's throat by Google.
I'm on metered service and have grown accustomed to living off of WiFi. With prior phones I was in full control of what I've been charged. With the G4, it's nearly impossible to manage ...
Any thoughts, shared experiences or recommendations ?

Hmm, there is a setting that can automagically use LTE if the Wifi is detected not to have internet access. I can't think of what it's called at the moment but it's in setting somewhere - possibly WIFI settings.
I would also be sure to disable T-Mobile's "diagnostics" setting in the T-Mobile app and attempt to turn off any other monitoring settings contained within. I think there is a setting that monitors the LTE signal strength and that could be making it pop on.
Other than that, it does seem rather annoying for you! You are on T-Mobile though, didn't you get the 10GB data pass and have the unused data rollover? Another note, why not setup the data limiter in Data Usage to automagically turn off the data after X GB usage. I know it isn't a direct solution but if data usage is a concern, it could work as a workaround!

Hey, thanks for the response and suggestions.
To be clear, I'm on Ting's GSM network - which is serviced by T-Mo.
I'm well versed with Android and prior to this phone I was on a Nexus 5 with 5 .1 .1 and it didn't behave like this.
I've tried all the buried settings to get in front of "enabled" data on two different G4's but nothing is panning out.
And yes, I did think of that T-Mo diagnostics app and it's not enabled - at least not on the surface.
And one more thing, my WiFi is solidly connected when data goes rogue robot.
Hadn't considered the data cap setting. Seems clunky but might help until a custom ROM is available.
rockerrock said:
Hmm, there is a setting that can automagically use LTE if the Wifi is detected not to have internet access. I can't think of what it's called at the moment but it's in setting somewhere - possibly WIFI settings.
I would also be sure to disable T-Mobile's "diagnostics" setting in the T-Mobile app and attempt to turn off any other monitoring settings contained within. I think there is a setting that monitors the LTE signal strength and that could be making it pop on.
Other than that, it does seem rather annoying for you! You are on T-Mobile though, didn't you get the 10GB data pass and have the unused data rollover? Another note, why not setup the data limiter in Data Usage to automagically turn off the data after X GB usage. I know it isn't a direct solution but if data usage is a concern, it could work as a workaround!
Click to expand...
Click to collapse

6.0.1 Marshmallow Removes Data Toggle (slow/faiLs to recognize mobile network)

So, I knew updating to Marshmallow 6.0.1 would do this, and, I was purposely holding off until I could find an answer on how to restore the Data Toggle option.
But, AT&T and or Samsung are trying to be like M$, and low and behold, they ninja-updated my phone without my explicit agreement........
SO..... Now I'm stuck with this crap situation of not having a Data Toggle option.
Anyways, Now I noticed the following behavior:
When I have WIFI on, I then turn it off.
Doing this should automatically kick in my mobile provider data service.
Yet, it takes forever to kick in. Up to 10minutes!
There's like not way to force it to be enabled instantly once I disable WIFI.
I reset my network settings and still has the same issue.
It seems for some reason the phone just doesn't want to immediately initiate attempting to connect to my mobile network after I disable WIFI.
Anyone else notice this? and or can provide some pointers to get that data toggle back?

Just an additional note:
Anyways, there isn't any pattern I can find that determines why the phone won't try to initiate the mobile network immediately after WIFI is turned off.
This doesn't ALWAYS happen.
(I do know it never was an issue when I had the Data Toggle option prior to the Marshmallow update)
Well, At this point, I've tried this a few times and it works. If the Mobile Network doesn't kick in:
Go to Settings > Connections > Mobile Networks > Access Point Names (( Then choose your access point (Which is your APN to the mobile carrier) (Yes, it is already selected, but choose it anyways) ))
Once I do that and back out of the settings the mobile network kicks in.
*hands in the air on this*..

BlueCider said:
Just an additional note:
Anyways, there isn't any pattern I can find that determines why the phone won't try to initiate the mobile network immediately after WIFI is turned off.
This doesn't ALWAYS happen.
(I do know it never was an issue when I had the Data Toggle option prior to the Marshmallow update)
Well, At this point, I've tried this a few times and it works. If the Mobile Network doesn't kick in:
Go to Settings > Connections > Mobile Networks > Access Point Names (( Then choose your access point (Which is your APN to the mobile carrier) (Yes, it is already selected, but choose it anyways) ))
Once I do that and back out of the settings the mobile network kicks in.
*hands in the air on this*..
Click to expand...
Click to collapse
Factory reset, install Samsung good lock. Problems solved.
Sucks that the mobile data toggle switch doesnt work, this is the best alternative I've found. Bonus is that stupid warning about turning data off doesn't pop up anymore with the good lock

Why do you have to do the factory reset?

Avail211 said:
Factory reset, install Samsung good lock. Problems solved.
Sucks that the mobile data toggle switch doesnt work, this is the best alternative I've found. Bonus is that stupid warning about turning data off doesn't pop up anymore with the good lock
Click to expand...
Click to collapse
I am unable to find Good Lock on Galaxy store! :\

I pulled down the Good Lock apk from the apk mirror site, but, the data toggle STILL didn't work.
At least half the time, I have to to this in order to get the Mobile Data reconnected..:
Go to Settings > Connections > Mobile Networks > Access Point Names (( Then choose your access point (Which is your APN to the mobile carrier) (Yes, it is already selected, but choose it anyways) ))
This is extremely annoying. Can anyone else verify?

BlueCider said:
I pulled down the Good Lock apk from the apk mirror site, but, the data toggle STILL didn't work.
At least half the time, I have to to this in order to get the Mobile Data reconnected..:
Go to Settings > Connections > Mobile Networks > Access Point Names (( Then choose your access point (Which is your APN to the mobile carrier) (Yes, it is already selected, but choose it anyways) ))
This is extremely annoying. Can anyone else verify?
Click to expand...
Click to collapse
Simple, go to the USAGE MANAGER app, there is data toggle switch in it.

Xa33M said:
Simple, go to the USAGE MANAGER app, there is data toggle switch in it.
Click to expand...
Click to collapse
OK...... Figured this out.
Firstly, I had Multiple APN set up on the phone. I don't know why, but they ended up being there.
However, I only had selected the proper APN out of all of those for the Mobile Data.
The phone at this point didn't care if it was selected, and when switching off my WIFI, the Mobile Data wouldn't come on, and I had to do the following:
Go to Settings > Connections > Mobile Networks > Access Point Names > Choose THE ALREADY CHOSE proper APN and exit out of settings
After this, the Mobile Data would come on...
SO WHAT I DID:
I removed all APNs that were defined in the 'Access Point Names' section, keeping only ONE APN (The proper one).
After this, the phone would switch on Mobile Data automatically.
SO.... In Conclusion, it looks like this build won't switch to the Mobile Data of a selected APN if multiple APNs are defined in the 'Access Point Names' section...

BlueCider said:
Why do you have to do the factory reset?
Click to expand...
Click to collapse
I've found thru the years that when upgrading to major OS changes, factory resetting helps prevent a plethora of issues. I've rarely ever had any issues with updates across all OS systems (Windows, MacOSX, BlackBerry, Android) because I factory reset. I wouldn't be able to tell you how many posts I've seen across all OSs where a factory reset fixed the problems. To prevent the hassle and headache, I just factory reset. Backing up my messages/phone logs is really the only thing I have to do; all my pictures are automatically backed up to Google Photos and my WD MyCloud, everything else syncs/connects/updates in the cloud (GDrive, GNotes, GMail, etc...) so as soon as I login I'm back to 95%. Downloaded SMS Backup and Restore (Play Store) and my messages/phone logs were restored in a couple min. Setup the APN for mobile data and I'm back to 100%. From there it's just setting up Nova, changing the factory theme, and reorganizing my icons into folders.

Auto Turn Off Mobile Data When Connected to WiFi

Does anyone know of an app that will automatically turn off mobile data when i'm successfully connected to a WiFi connection have have internet access through it.
The app should do something like this...
1. Check for WiFi connection
2. If WiFi = connected, then test WiFi connection
3. If connection = Good, then turn off Mobile Data, else leave Data connection ON
If you suggest Tasker, then you better follow it up with a full write-up on how to set it up on Tasker.

I believe (someone will correct me if I'm wrong) that Android is programmed to use wifi when it's available, even though your data connection looks as if it's on.
If you're not happy with that, Automate It should be able to do something for you. I have Automate It Pro set to turn off wifi & data at midnight, for example, to avoid the nuisance of emails pinging me in the middle of the night. And it switches wifi & sync on at 09:00 each day. Very useful tool, simpler than Tasker, so no tutorial from me...
There are a few Automate apps in the Play Store - it's this one:
https://play.google.com/store/apps/details?id=AutomateIt.mainPackage
This free version allows you 3 (as I recall) triggers - if you need more it's not too expensive to buy Pro.

I use RadioControl to handle that for me.
https://play.google.com/store/apps/details?id=com.nikhilparanjape.radiocontrol&hl=en
It requires root, and it's not perfect. But it works well enough for me.
[NG]Owner

Try smart radio xposed module.

pr0ndigy said:
Does anyone know of an app that will automatically turn off mobile data when i'm successfully connected to a WiFi connection have have internet access through it.
The app should do something like this...
1. Check for WiFi connection
2. If WiFi = connected, then test WiFi connection
3. If connection = Good, then turn off Mobile Data, else leave Data connection ON
If you suggest Tasker, then you better follow it up with a full write-up on how to set it up on Tasker.
Click to expand...
Click to collapse
Tasker does it pretty simply, but it needs root access..
Set up (2) tasks - I called mine Data Off & Data On. You will need to select "Net/Mobile Data" and then set "On" or "Off" respectively. Next set up your profile. Select "State/Net/Wifi Connected", and leave everything empty and save. This will trigger the profile when any wifi is connected. (Optionally, you could set it to your home or work wifi, etc). Your "task" will be "Data Off", then add an "exit task" for "Data On" (by long pressing the Data On and selecting "exit task").

dahawthorne said:
I believe (someone will correct me if I'm wrong) that Android is programmed to use wifi when it's available, even though your data connection looks as if it's on.
Click to expand...
Click to collapse
^^^^ This. Android has done this for years. Some devices have the ability to keep mobile data on with wifi, but those usually default to OFF.
Note in the screenshot below that my Cellular network state (mobile data) is "Disconnected"

Pkt_Lnt said:
^^^^ This. Android has done this for years. Some devices have the ability to keep mobile data on with wifi, but those usually default to OFF.
Note in the screenshot below that my Cellular network state (mobile data) is "Disconnected"
Click to expand...
Click to collapse
Interestingly, I bring up the same screen on my phone (when connected to wifi) and it shows cellular is still connected??

jbaumert said:
Interestingly, I bring up the same screen on my phone (when connected to wifi) and it shows cellular is still connected??
Click to expand...
Click to collapse
Do you have a ROM that has that option and it is enabled?

Pkt_Lnt said:
Do you have a ROM that has that option and it is enabled?
Click to expand...
Click to collapse
Running SIX ROM - Just checked, that option is disabled in the Dev Settings / connected to good wifi / and cellular is active...

¯\_(ツ)_/¯
Now it is a question for that rom dev.