Thursday, 12 November 2015

Why is KINGROOT connecting these IPs all the time? (2 months after ROOTing)



I have already made two posts about this, under another topic/tread, but as good answers has not yet returned, I start a new tread here.
(I will include the info from my previous posts, in the bottom of this post)


Original Question:
I used KingRoot to ROOT my phone, and I am fully aware that during this process the app will download an exploit, based on my phonetype/android version....

But from I rooted my phone (several months ago) and to this day, the KingRoot app is trying to connect to TWO different IP ranges in China.
It tries to do so, upto 40 times in only 5 minutes.

NB: And I have auto-update disabled, and also wifi update disabled.

The IP's it most often tries to connect to is:

14.17.43.* (on port 80)
183.61.47.* to 183.61.51.* (on port 80)
and sometimes it also tries to connect on port 443

So why is is that KingRoot tries to "call somewhere in China" several hundred times a day?

www ( geoiptool.com/en/?ip=14.17.43.150 )
www ( geoiptool.com/en/?ip=183.61.47.36 )

My system gets SLOW everytime the KingRoot app starts back up, and connects or tries to connect, as it is using a lot of system resources, while trying to do so..

Can I get an honest story of why it connects to your servers, again and again, after the ROOT process has been completed? (two months ago) ??

And the only interaction I have with the KingRoot app is to FORCE KILL it every time my phone gets cloggy/slow again. And when the KingRoot app gets FORCE KILLED, my phone starts working as normal, until KingRoot starts up again...

I would love to get a honset story about why it tries to connect to your servers everyday... And I wonder what information got passed on to you folks, before I installed my firewall apps, VPN apps, and proxy apps that gave me a clue to WHY the KingRoot app slowed my system down.

SOLUTION-BEFORE-REAL-SOLUTION:
The best idea so far (until we get an answer) is to install the following apps:

For a NON-ROOT solution, but I guess you already have root,hehe, please use:
NoRoot Firewall (NO ROOT REQUIRED) (EXCELLENT LOGGING IN-APP)
( play.google.com/store/search?q=noroot%20firewall&c=apps&hl=en )
To block the above IP ranges, and other things you'd like to block..

--> Xprivacy (ROOT REQUIRED) (XPOSED FRAMEWORK)
( play.google.com/store/apps/details?id=biz.bokhorst.xprivacy.installer&hl=en )

>> App Premission Editor - Turn on and off permissions for different apps.
>> You can use it to "turn on/off" network/internet access for ANY installed app.
>> This app helps you to install XPOSED framework (It also has good apps/modules)

--> AFwall+ (ROOT REQUIRED)
( play.google.com/store/apps/details?id=dev.ukanth.ufirewall&hl=en )
>> Firewall. Deny all internet access for any app that has internet permissions

--> Hosts Editor (ROOT REQUIRED)
( play.google.com/store/apps/details?id=com.treb.hosts&hl=en )
>> Almost like a Firewall - Block some IPs from working
>> A good list of things to block would be the IP ranges above.
>> Also you can block ADS and TRACKING the same way.



Original posts:
http://forum.xda-developers.com/show...postcount=2651
http://forum.xda-developers.com/show...postcount=2641



No comments:

Post a Comment