Firewall

Event log

1. Threat31 Dec · 23:38· Mobile data

   com.unknown.adnet → 142.0.4.21:443

   TLS · destination on tracker blocklist

   Outcome

   Connection refused before TCP handshake. Process notified with ECONNREFUSED.
2. Threat31 Dec · 23:22· Wi-Fi · HomeNet

   tracker.metricsx → metrics.io

   Background beacon attempt #27

   Outcome

   Blocked at DNS layer. Resolver returned NXDOMAIN to caller.
3. OK31 Dec · 22:55· Wi-Fi · HomeNet

   chrome → google.com

   HTTPS · primary user request

   Outcome

   Allowed. 14.3 KB exchanged in 412 ms.
4. OK31 Dec · 21:00· Wi-Fi · HomeNet

   com.spotify.music → spclient.wg.spotify.com

   Streaming session keepalive

   Outcome

   Allowed via streaming rule. Sustained 96 kbps for 42 min.
5. OK31 Dec · 18:48· Wi-Fi · HomeNet

   com.weather.app → api.weather.com

   Hourly forecast pull

   Outcome

   Allowed. Response 2.1 KB · cached for 1h.
6. Threat31 Dec · 15:00· Mobile data

   com.unknown.adnet → analytics.scoredoubleclick.net

   Tracker beacon

   Outcome

   Blocked. App retried 4× with exponential backoff, then gave up.
7. Threat30 Dec · 21:55· Mobile data

   com.suspicious.flashlight → 45.61.187.10:9001

   Non-standard port · unknown ASN

   Outcome

   Blocked & app quarantined. Permissions auto-revoked.
8. OK29 Dec · 09:30· Wi-Fi · CafeNet

   com.bank.app → secure.mybank.com

   Authenticated session

   Outcome

   Allowed with strict TLS pin enforced. Cert chain validated.
9. Warn28 Dec · 16:00· Wi-Fi · HomeNet

   com.game.f2p → ads.appodeal.com

   Ad SDK init

   Outcome

   Allowed but rate-limited to 1 req/min by policy.

Jump to another module