yashsingh1/xdaforums huggingface dataset:
[Android Q&A, Help & Troubleshooting] Tony Boone:
(Thanks to the admin who allowed me the additional privileges necessary to post the images in this thread!)

It's a T-Mobile Alcatel Onetouch Fierce. Three weeks old at most. Only have a couple of free apps on it and no more than five paid apps. Rooted. Factory ROM.

Something strange happened to my T-Mobile Samsung Exhibit II 4g the day before I had to buy this new one. The Exhibit II 4g was working fine and then went into an unrecoverable boot loop. Not just any boot loop but one that wouldn't take or allow me to perform a factory reset. It was as though someone had sent some malicious code to the phone and sent it into a death spiral.

I could take the battery out of it, put it back in, and it would immediately boot up. Normally I'd have to hold the power button on for about three seconds but not then. Nothing I could do but replace the phone and I lost a lot of precious data in the process.

I called the DoD Network Information Center and spoke with a tech who said that they only deal with military IT at that center. He told me they have no association or affiliation with private corporations (:rolleyes:) and that I needed to contact my cell phone provider. I called T-Mobile and all the woman in their second level tech support wanted to do was do a complete factory reset on my phone. She didn't seem to understand the potential gravity of the situation and why I was calling.

Here are two more screen shots of the firewall log on the T-Mobile Alcatel Onetouch Fierce except that when these images were taken the phone has been in 4g network access mode only. WiFi has been off for about two hours now.

Android Firewall's 'Allowed' communication:

Android Firewall's 'Blocked' communication:
[Android Q&A, Help & Troubleshooting] Tony Boone:
I thought for sure that this would get at least a couple of people curious. Why my phone is communicating almost every minute with the U.S. Department of Defense Network Information Center doesn't seem to be of great interest to most here. With the spying revelations going on I'd have thought that someone here must have seen something similar to what I'm seeing on my phone.

I'm not the most knowledgeable when it comes to the Android OS and individual that has a phone like mine apparently isn't getting the same network filtering through the Department of Defense Network Information Center (22.230.19.19) that I see on my phone as evidenced by their IP being involved in just about anything this phone does.

As I said before, there are no cracked or hacked apps. It being rooted is as close to it being hacked as it's going to get and there are no custom ROMs available for this phone; the T-Mobile Alcatel Onetouch Fierce. I thought that maybe it had something to do with the weather app I have installed but that app developer wouldn't be using military computers that I've been told are for military use only according to the DoD Network Information Center technician I spoke with yesterday.

Was just told that I could take screen shots and not have to photograph the screen as I did yesterday. Not up to speed on Android yet but getting there.

Here are two more screen shots this morning. It appears that any time an app accesses the Internet that information is sent to the DoD Network Information Center or passes through that facility. Their IP address is 22.230.19.19.

Android Firewall allowed apps access log file:

Android Firewall blocked apps access log file:
[Android Q&A, Help & Troubleshooting] Tony Boone:
Is it possible that someone is spoofing the DoD address and if so wouldn't it have to be a pretty sophisticated operation to know what network my cell phone is on at any given moment?

Again, there is no cracked or hacked software on my phone. What is on it is straight from the Play Store either purchased or free.
[Android Q&A, Help & Troubleshooting] Tony Boone:
There is one major cell phone carrier routing their cell phone network through the Department of Defense Network Information Center and only one person seems interested in this issue? I would have thought that this thread would have had many posts other than mine and the other lone post.
[Android Q&A, Help & Troubleshooting] BlobLobba:
It's nothing. No disrespect to your curiosity. But the Internet and its infrastructure is massive and those websites that supposedly trace IPs to maps are way off. It's just a data centre it's referencing and it could be anything that is hitting that IP, such as a time and date check. Time and date servers are often based on the most reliable large data centres. Those large data centres often have contracts with large clients such as the DoD.
[Android Q&A, Help & Troubleshooting] Tony Boone:
No. It is something. I called the data center myself and was told that they only provide service to the military. They have no commercial customers and have no relationship with cell phone companies. It's strictly for the U.S. military and its various branches, agencies, and organizations. Others have seen this on their phones as well and straight out of the box.

Here are two blog articles from

THREE YEARS AGO

when someone else noticed this more than suspicious activity.

Why is the Defense Department snooping on my phone?

DoD IP address mysteriously unreachable

The above blog writer believes he may have solved the mystery but many of those commenting on his conclusion aren't so convinced.
[Android Q&A, Help & Troubleshooting] r.dunne:
Revolution!

I hear ya bro. Problem is the "sheople" won't, and don't want to. One thing to consider here is that this site seems to cater more toward the "big guys" who are ultimately THE problem. For example; I am on a smaller carrier, but I have one of the most popular Android devices on the planet. There is all kinds of info here for the same phone offered by the "big guys" but in order to get anywhere with my device, I had to go elsewhere to find what I needed. They ARE part of the problem! Anyone who is "in bed" with the "big guys" aren't going to give you the time of day.

I'm definitely not qualified to offer any educated advise or answers but I can say that you would most likely be taken more seriously if you find other arenas to discuss this issue. I am just as concerned as you may be, if not more so because it goes much deeper than cellular devices, or even technology of any kind. I have my suspicions about almost anything these days. That's what comes with being a thinker and seeking truth.

Best of luck to you, keep up the good work. A revolution is in order!:cyclops:
[Android Q&A, Help & Troubleshooting] xsenman:
Interesting scenario you seem to be having, sounds as though you are or were forced to buy this unit....which relates to some topics

in [INFO][Who is Spying & Monitoring you] Google removes privacy feature from Android , that's why I linked this thread there, maybe when you get to the bottom of this, we will know for sure. one option would be to test your SIM card on another phone using the same setup wifi. or try assigning a static IP to your phone and observe it.

Frankly, hackers are much more sophisticated than being able to be blocked / tracked by a simple firewall. But all avenues should be explored. good luck

Check this out! Links to useful Guides and " Banned " Documentaries ​
[Android Q&A, Help & Troubleshooting] Tony Boone:
I think I've figured out a possible reason for the DoD Network Information System connecting to my Alcatel phone. Very likely it was the program used to root the phone.

After rooting there was a program in the app list with Chinese letters. I'm wondering if that program written in Chinese hadn't implanted some malware causing it to send information to China and therefore, this behavior seen as suspicious and my phone targeted by the NSA, the military, or both. Anyone having an Alcatel One Touch Fierce that's been rooted should look in their app list for a program with Chinese characters. Maybe someone could tell me what that program is. I don't see it on the S3 list of programs.

I can't say it wasn't on the Alcatel before I rooted it, but doubt it.
[Android Q&A, Help & Troubleshooting] warewaregaijin:
Have you figured out anything else about this? Do you still have the phone and is it still communicating with government IP addresses? Were you able to get rid of that Chinese app and figure out what it was doing?

I ask because I found that Chinese app on my Fierce after rooting with Framaroot too. At least I didn't notice it on there before that anyway. I've since reset my phone and that app disappeared. I've implemented a strict whitelist firewall with Afwall+ but I don't know enough about the Android OS to really know what behavior is not normal.

The one thing that looks strange to me is it looks like all Internet traffic is trying to go through the kernel according to the firewall logs. The internet still work with the kernel blocked by the firewall so it must not be necessary for normal functioning.

Also whenever I connect to Google or any Google services I also connect to a range of IP address that resolve to tmodns.net. They're HTTP requests and I have my DNS set to Google's servers so it shouldn't be DNS related. When I use my browser to navigate directly to the IP addresses it takes me to the Google homepage. This is probably just a T-Mobile thing but it seems strange all my Google activity should route through them.

Overall this seems like a very insecure phone in general. There are a ton of Mediatek apps that don't seem essential but have basically full permissions to everything.
[Android Q&A, Help & Troubleshooting] warewaregaijin:
Looking into it further it appears that T-Mobile is just using Dod IP ranges for their internal network. Over the last few days my phone has been aassigned IPs in the 21.0.0.0/8 and 30.0.0.0/8 blocks. A traceroute on these IPs dies before leaving the internal T-Mobile network.

Though I am still wondering why I have to connect to T-Mobile servers in order to access any Google services, if anyone has any insight about that.
[Android Q&A, Help & Troubleshooting] totoflash:
No one is spying you mate! Don't worry!

Sometimes developers use shortcuts to avoid further development of something that can work even without stuff like the IP, so in these case some smart guy may decide that since he has no need of tracking the IP but he must put something in call that look likes an IP he cheats in the code, using somethig like 11.11.11.11, very quick and very probably he will never realize this is one of the DoD Pubblic IP range.

Did I solve your mistery?
[Android Q&A, Help & Troubleshooting] billy197400:
DOD IP

Your not crazy, my metro pcs android phone also has a DOD IP number on it 26.235.168.219

I called DoD they do nothing, I reported to FCC and FBI.

Metro Pcs are dummies and know not what to do they said it might be ransomware had me hard reset the phone 5 times and that IP is still there.

Finally I threw a fit at the Metro Pcs Corp. Store here in Las Vegas, They ordered me a new phone.

Any new info on this
[Android Q&A, Help & Troubleshooting] TZuto:
You may want to re-evaluate the company you keep. And if your walking a straight line, you have nothing to worry about. However I do suggest you refrain from looking into this. Someone had told me that if I kept digging, I would find something. The way it was worded implied the "something" to be, not positive. She was right. It's funny, the contradictions of what we say, and what we do... as I'll continue to seek resolution to further understand. It will probably be the death of me. I suggest you not let it put you in the same position.
[Android Q&A, Help & Troubleshooting] jbram:
Sorry to revive a dead thread. Just today I turned the wifi off on my Boost Mobil to get the default network IP from my "about phone' tab. I then took that nad plugged it into "who.is", and sure enough, the ip is routed through that DoD Information center in Columbus OH. No wonder my 4g is so slow, im being routed through a government proxy server. I'll be searching for a new provider now, but I can't help suspect that they are all doing this now.
[Android Q&A, Help & Troubleshooting] #330:
DOD

MY PHON E HAS A TMOBILE SIM CARD IN IT. IT A SAMSUNG GALAXY S4 GT-i9515L... THE PHONE IS NOT ACTIVATED. BUT IF I GO INTO STATUS WHILE MY DATA IS ON(EVEN THOUGH THE PHONE IS NOT ACTIVATED) IM GETTING COLUMBUS OHIO DOD IP ADDYS AS MINE. ALSO.MY MOBILE NETWORK STATE IS VOICE active DATA ACTIVE. AND IM A TMOBILE NETWORK. IM ALSO GETTING 3G 4G RECEPTION..VERY ODD.NOW IF IN TURN THE DATA >>>> THIS IS WHERE IT GETS GOOD, IM ONLY GETTING DOD IP ADDYS WHEN MY DATA IS ON. EVEN THOUGH I HAVE NO SERVICE, BUT IT SAYS I DO..REALLY FU#%ED UP **** GOING ON

---------- Post added at 12:21 AM ---------- Previous post was at 12:15 AM ----------

DOD

MY PHON E HAS A TMOBILE SIM CARD IN IT. IT A SAMSUNG GALAXY S4 GT-i9515L... THE PHONE IS NOT ACTIVATED. BUT IF I GO INTO STATUS WHILE MY DATA IS ON(EVEN THOUGH THE PHONE IS NOT ACTIVATED) IM GETTING COLUMBUS OHIO DOD IP ADDYS AS MINE. ALSO.MY MOBILE NETWORK STATE IS VOICE active DATA ACTIVE. AND IM A TMOBILE NETWORK. IM ALSO GETTING 3G 4G RECEPTION..VERY ODD.NOW IF IN TURN THE DATA >>>> THIS IS WHERE IT GETS GOOD, IM ONLY GETTING DOD IP ADDYS WHEN MY DATA IS ON. EVEN THOUGH I HAVE NO SERVICE, BUT IT SAYS I DO..REALLY FU#%ED UP **** GOING ON

PS IM GETTING LIKE 3 IP ADDYS ..CHANGES EVERY NOW AND THEN

---------- Post added at 12:32 AM ---------- Previous post was at 12:21 AM ----------

If you also dig deep through your "trusted credentials".. You might be surprised
[Android Q&A, Help & Troubleshooting] #330:
im ready to get my dark internet guru's on this

Home » IP Tools » IP Lookup » 25.241.237.38

IP Details for 25.241.237.38

Tweet

This information should not be used for emergency purposes, trying to find someone's exact physical address, or other purposes that would require 100% accuracy. Please read about geolocation accuracy for more information.

General IP Information

IP:	25.241.237.38

Decimal:	435285286

Hostname:	25.241.237.38

ISP:	UK Ministry of Defence

Organization:	UK Ministry of Defence

Services:	None detected

Assignment:	Static IP

Blacklist:

Geolocation Information

Continent:	Europe

Country:	United Kingdom gb flag

Latitude:	51.4964 (51° 29′ 47.04″ N)

Longitude:	-0.1224 (0° 7′ 20.64″ W)
[Android Q&A, Help & Troubleshooting] clonk:
As a further observation and clarification effort, the aforementioned DoD IPs are actually visible for up to one minute during

every

network initialization process. So this means every time my phone is rebooted, every time I toggle back to carrier network mode from either Wi-Fi mode or Airplane mode, and every time my phone otherwise loses and then reestablishes its network connection (e.g., from signal loss due to terrain). My strong suspicion is that all cellular phones with Sprint service are connecting through US Department of Defense IP space in the same manner as mine. Most Sprint customers are simply unaware of the phenomenon since most folks don't monitor their connection routing, especially during network initialization.

I've already speculated on why Sprint's routing through DoD IP space may be happening. But I think the bigger question may be: If the actual reason Sprint is connecting customers to its network through DoD IP space is not some secret thing, why doesn't Sprint simply provide us with the genuine explanation? I, for one, would like to know the reason. Sprint's 2nd level tech people are either oblivious to the fact or are merely faking ignorance. I doubt there's an easy way to contact one of their network administrators concerning the matter and get a response.

Based upon my observations, here's what seems to be happening: A VPN device may be bridged onto Sprint's internal network. Said VPN device is providing the gateway to the DoD's network. The DoD IPs are dynamically assigned per connection instance, and each one is NAT'ed to a later-displayed internal network gateway IP, such as 172.16.209.1 (or another similar IP that's not externally routable). And this NAT'ed gateway IP is the only one that customers will usually notice. Again, Sprint service users would need to observe the network initialization activity to see the dynamically assigned DoD IP they receive each time their device initializes with Sprint's internal network. When they did so, they would not only notice a DoD gateway IP appear on their connection, but also that the last octet of that DHCP-assigned IP precisely matches the DHCP assigned public WAN IP that they ultimately receive to connect to the Internet.

I am only reporting this matter -and my observations- because I find it interesting and because I thought others among this community may wish to provide some input. Based upon a bit of web research, it actually seems that this DoD gateway IP phenomenon has been going on for several years, and that it has even involved carriers besides Sprint. And all of that obviously means something. For one, it means that it's not a stealthy effort by any perception, because anyone can easily see the connections. So why shouldn't what's going on become common knowledge? I can't see that it would be a national security measure considering that the connection process to the DoD IPs is so non-transparent. There almost has to be another answer. Your thoughts, anyone?
[Android Q&A, Help & Troubleshooting] therealjayvi:
I would just like to add that I found this thread after a little bit of simple digging after I noticed something. A customer brought in his device today complaining that it "doesn't work" so I decided to take a look at it for him. Turns out he just needed to get a compatible Sprint sim card for his device since Sprint somehow has a device-specific compatibility as far as their sim cards go. Regardless, this phone was brand new out of the box. His sim card is currently activated with a line of service with his iPhone (where he pulled the sim card from) on Sprint. Putting it into the device he brought would prompt for activation, but fail. While checking out the settings I noticed that the 4G option was available to open so I tapped the option to see what it had to say. Underneath the 'Network Provider' field was nothing but a blank space, but it had an IP address listed underneath of '26.255.180.84' which, after a simple Google search, led me to an owner of 'DoD Network Information Center'. Googling the name showed me that it belonged to Department of Defense, and underneath was the listing for this thread here. What prompted me to even post here was because of a strange thing I noticed. Just to be sure I wasn't mistaken when looking at the IP address on the phone I checked it again except this time the IP address is not there. It simply will not show up no matter what unless I check within the first few moments of plugging the SIM card in. In retrospect I'm not sure what all of this means, except that Sprint is definitely involved in whatever is going on here.
[Android Q&A, Help & Troubleshooting] clonk:
You may be correct. I have no proof one way or the other. All we know for certain is that these cellular networks are routing their customers through an extensive non-public network belonging to the DoD. And I'll add that the way they're doing so seems sloppy at best. If they don't know how (or have no way) to conceal the connections to that system, they should at least be willing to admit what they're doing and why. Considering that being able to see the IP connections (using various network tools) may present some level of risk to the system's security, I doubt that publicly stating why the routing is occurring would increase said risk.
[Android Q&A, Help & Troubleshooting] truthis out there:
It popped up on my router it is dod

My guess is our own version of the Nazi SS

Depth of homeland secrity
[Android Q&A, Help & Troubleshooting] clonk:
Presumably everyone has seen the news on the Wikileaks CIA hacking story. My bet is that the DoD Network Information Center IPs that are dynamically assigned by various American cellphone carriers to customer devices are related to such CIA/NSA personal surveillance capability. I mean seriously, the VPNs that the mentioned devices are connecting through are in fact elements of the DoD Network Information Center! The fed spies clearly want to have this selective surveillance capability and there's no question that they have control of the networks that all of these devices are linked through based on the IPs that are being assigned to our devices. So I'm sure that makes it much easier for these agencies to spy on anyone they choose whenever they wish. If you are spying on someone electronically, it's much more convenient to pull the sought after data back through your own network.

A quote from: https://www.washingtonpost.com/news...s-and-cars-for-spying/?utm_term=.05c10011930b

Here are some reports (with video) on this latest Wikileaks revelation:

https://www.cnet.com/news/wikileaks-cia-hacking-tools-phones-apple-samsung-microsoft-google/

http://www.foxnews.com/tech/2017/03...now-in-hands-hackers-worldwide-wikileaks.html
[Android Q&A, Help & Troubleshooting] clonk:
This may shed some light on the role of the DoD IP's...

It's a paragraph from a New York Times article about Dan Coats, Trumps nominee to serve as the new director of national intelligence (DNI). The URL is: https://www.nytimes.com/2017/03/09/us/politics/trump-coats-national-intelligence.html

I bet that's when they routed the customers of Sprint and other carriers through the DoD's network. It was seemingly in exchange for immunity from lawsuits involving the electronic surveillance of private conversations. At least that's the portion of my theory that addresses the IP routing element.
[Android Q&A, Help & Troubleshooting] pietrod21:
not sure if this was solved or not, but the solution it's clearly to go on wiki and search for root name server, you will find your solution en.wikipedia.org/ /Root_name_server
[Android Q&A, Help & Troubleshooting] clonk:
I'm unsure how that would be applicable to why the cell service carriers are routing their customers through DoD's private network. And that's because there are no name servers assigned to any of the IPs within the address blocks in question. None of those IPs thus have any associated rDNS host names (i.e., there are no PTR records for them).

I'm somewhat convinced that my assessment concerning the Foreign Intelligence Surveillance Act and the telecommunication companies opting to allow NSA access to their customers private communications in exchange for immunity from lawsuits is an accurate answer.
[Android Q&A, Help & Troubleshooting] LilAnt530:
You're a savage bro xD, that makes too much sense!

Many prepays & janky models in my past (all Android mostly) & the number 1 thing I would advise is to just find a way to build an intranet that suites your needs..... Cuz these folks don't care & neither does Time Warner.
[Android Q&A, Help & Troubleshooting] Droidriven:
Does no one remember Edward Snowden?

For one, all devices have components for emergency location and calling. Don't you think that would be overseen by a government agency, especially in law enforcement (911)/defense sector?

Also, as the information that Snowden leaked suggests, the NSA has been gathering metadata on our locations, cellular activity/Internet traffic and who we are in contact with. I'm willing to bet that you'd see the momentary DoD IP not only when first inserting SIM or switching between WiFi and mobile data, but also when traveling and switching from one tower to the next. This would suggest tracking when and where you ping to give a general idea of where you go.
[Android Q&A, Help & Troubleshooting] maXDAmn:
it's strange, too many "junior". where is the OP?
[Android Q&A, Help & Troubleshooting] LilAnt530:
In my state personally I doubt most folks remember lunch O.O
[Android Q&A, Help & Troubleshooting] clonk:
A tip: Just install an app from the Play Store called "IP Widget" and place the widget on your home screen. Then, under general settings, put a tick mark in the 'Network IP' option. From then on you'll see the DoD IP continually on your home screen. At least you will if you're on Sprint's network.