17:36:56, 29 Nov. (685372.320000) Admin login successful by 192.168.1.70 on HTTP 17:36:50, 29 Nov. IN: BLOCK [16] Remote administration (TCP [172.169.6.28]:57452-​>[143.159.101.162]:80 on ppp3) 17:36:38, 29 Nov. (685354.260000) New GUI session from IP 192.168.1.70 17:35:03, 29 Nov. (685258.720000) Lease for IP 192.168.1.85 renewed by host Unknown-​ce-​a6-​ae-​d7-​d3-​84 (MAC ce:a6:ae:d7:d3:84). Lease duration: 1440 min 17:35:03, 29 Nov. (685258.720000) Device connected to ath10: Hostname: Unknown-​ce-​a6-​ae-​d7-​d3-​84 IP: 192.168.1.85 MAC: ce:a6:ae:d7:d3:84 via ce:a6:ae:d7:d3:84 Lease time: 1440 min. Link rate: 866.6 Mbps 17:35:03, 29 Nov. (685258.630000) Lease requested 17:35:03, 29 Nov. ath10: STA ce:a6:ae:d7:d3:84 IEEE 802.11: Client associated 17:34:51, 29 Nov. ath10: STA 2c:3b:70:65:2d:d9 IEEE 802.11: Client disassociated 17:34:50, 29 Nov. IN: BLOCK [16] Remote administration (TCP [80.75.212.9]:45411-​>[143.159.101.162]:8080 on ppp3) 17:34:43, 29 Nov. ath10: STA 2c:3b:70:65:2d:d9 IEEE 802.11: Client associated 17:34:25, 29 Nov. IN: BLOCK [16] Remote administration (UDP [95.214.27.39]:40905-​>[143.159.101.162]:161 on ppp3) 17:34:16, 29 Nov. IN: BLOCK [16] Remote administration (TCP [185.91.127.43]:43363-​>[143.159.101.162]:80 on ppp3) 17:33:07, 29 Nov. OUT: BLOCK [65] First packet is Invalid (Invalid tcp flags for current tcp state: TCP [192.168.1.68]:51766-​>[18.165.248.44]:443 on ppp3) 17:30:54, 29 Nov. (685009.930000) Device disconnected: Hostname: Unknown-​9e-​f0-​e9-​7b-​e2-​09 IP: 192.168.1.70 MAC: 9e:f0:e9:7b:e2:09 17:30:05, 29 Nov. OUT: BLOCK [65] First packet is Invalid (Packet not in tcp window: TCP [192.168.1.75]:49301-​>[17.57.146.153]:5223 on ppp3) 17:26:12, 29 Nov. (684728.020000) Host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09) using IP 192.168.1.70 detected on interface ath10, port -​1 17:26:02, 29 Nov. (684718.020000) Host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09) using IP 192.168.1.70 detected on interface ath10, port -​1 17:26:02, 29 Nov. ath10: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client associated 17:26:01, 29 Nov. (684716.810000) Lease for IP 192.168.1.70 renewed by host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09). Lease duration: 1440 min 17:26:01, 29 Nov. (684716.810000) Device connected to ath00: Hostname: Unknown-​9e-​f0-​e9-​7b-​e2-​09 IP: 192.168.1.70 MAC: 3c:84:6a:d9:e1:de via 3c:84:6a:d9:e1:de Lease time: 1440 min. Link rate: 138.0 Mbps 17:26:01, 29 Nov. (684716.730000) Lease requested 17:26:00, 29 Nov. (684715.620000) Lease for IP 192.168.1.70 renewed by host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09). Lease duration: 1440 min 17:26:00, 29 Nov. (684715.620000) Device connected to ath00: Hostname: Unknown-​9e-​f0-​e9-​7b-​e2-​09 IP: 192.168.1.70 MAC: 3c:84:6a:d9:e1:de via 3c:84:6a:d9:e1:de Lease time: 1440 min. Link rate: 138.0 Mbps 17:26:00, 29 Nov. (684715.540000) Lease requested 17:25:43, 29 Nov. (684699.100000) Lease for IP 192.168.1.70 renewed by host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09). Lease duration: 1440 min 17:25:43, 29 Nov. (684699.100000) Device connected to ath00: Hostname: Unknown-​9e-​f0-​e9-​7b-​e2-​09 IP: 192.168.1.70 MAC: 9e:f0:e9:7b:e2:09 via 9e:f0:e9:7b:e2:09 Lease time: 1440 min. Link rate: 107.0 Mbps 17:25:43, 29 Nov. (684699.010000) Lease requested 17:25:43, 29 Nov. ath00: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client associated 17:25:43, 29 Nov. ath00: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client disassociated 17:25:28, 29 Nov. (684683.600000) Lease for IP 192.168.1.70 renewed by host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09). Lease duration: 1440 min 17:25:28, 29 Nov. (684683.600000) Device connected to ath00: Hostname: Unknown-​9e-​f0-​e9-​7b-​e2-​09 IP: 192.168.1.70 MAC: 9e:f0:e9:7b:e2:09 via 9e:f0:e9:7b:e2:09 Lease time: 1440 min. Link rate: 107.0 Mbps 17:25:28, 29 Nov. (684683.520000) Lease requested 17:25:27, 29 Nov. ath00: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client associated 17:25:27, 29 Nov. ath00: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client disassociated 17:25:12, 29 Nov. (684668.210000) Lease for IP 192.168.1.70 renewed by host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09). Lease duration: 1440 min 17:25:12, 29 Nov. (684668.210000) Device connected to ath00: Hostname: Unknown-​9e-​f0-​e9-​7b-​e2-​09 IP: 192.168.1.70 MAC: 9e:f0:e9:7b:e2:09 via 9e:f0:e9:7b:e2:09 Lease time: 1440 min. Link rate: 107.0 Mbps 17:25:12, 29 Nov. (684668.090000) Lease requested 17:25:12, 29 Nov. ath00: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client associated 17:25:12, 29 Nov. ath00: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client disassociated 17:25:02, 29 Nov. BLOCKED 1 more packets (because of Remote administration) 17:25:01, 29 Nov. IN: BLOCK [16] Remote administration (TCP [159.65.3.45]:38308-​>[143.159.101.162]:443 on ppp3) 17:24:57, 29 Nov. (684652.650000) Lease for IP 192.168.1.70 renewed by host Unknown-​9e-​f0-​e9-​7b-​e2-​09 (MAC 9e:f0:e9:7b:e2:09). Lease duration: 1440 min 17:24:57, 29 Nov. (684652.650000) Device connected to ath00: Hostname: Unknown-​9e-​f0-​e9-​7b-​e2-​09 IP: 192.168.1.70 MAC: 9e:f0:e9:7b:e2:09 via 9e:f0:e9:7b:e2:09 Lease time: 1440 min. Link rate: 100.8 Mbps 17:24:57, 29 Nov. (684652.570000) Lease requested 17:24:56, 29 Nov. ath00: STA 9e:f0:e9:7b:e2:09 IEEE 802.11: Client associated 17:22:59, 29 Nov. IN: BLOCK [16] Remote administration (TCP [79.110.62.71]:40914-​>[143.159.101.162]:8443 on ppp3) 17:18:51, 29 Nov. IN: BLOCK [16] Remote administration (TCP [36.50.135.251]:60993-​>[143.159.101.162]:22 on ppp3) 17:17:55, 29 Nov. IN: BLOCK [16] Remote administration (TCP [83.222.190.66]:51937-​>[143.159.101.162]:80 on ppp3) 17:17:06, 29 Nov. IN: BLOCK [16] Remote administration (TCP [47.76.72.62]:52616-​>[143.159.101.162]:80 on ppp3) 17:16:29, 29 Nov. OUT: BLOCK [65] First packet is Invalid (Packet not in tcp window: TCP [192.168.1.75]:49301-​>[17.57.146.153]:5223 on ppp3) 17:14:37, 29 Nov. OUT: BLOCK [65] First packet is Invalid (Packet not in tcp window: TCP [192.168.1.79]:48305-​>[44.215.138.245]:443 on ppp3) 17:12:41, 29 Nov. (683916.980000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:41, 29 Nov. (683916.980000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 3c:84:6a:d9:e1:de via 3c:84:6a:d9:e1:de Lease time: 1440 min. Link rate: 141.5 Mbps 17:12:41, 29 Nov. (683916.900000) Lease requested 17:12:41, 29 Nov. IN: BLOCK [16] Remote administration (TCP [120.26.45.136]:37192-​>[143.159.101.162]:22 on ppp3) 17:12:40, 29 Nov. (683916.110000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:40, 29 Nov. (683916.110000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 3c:84:6a:d9:e1:de via 3c:84:6a:d9:e1:de Lease time: 1440 min. Link rate: 141.5 Mbps 17:12:40, 29 Nov. (683916.030000) Lease requested 17:12:39, 29 Nov. (683915.220000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:39, 29 Nov. (683915.220000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 3c:84:6a:d9:e1:de via 3c:84:6a:d9:e1:de Lease time: 1440 min. Link rate: 141.5 Mbps 17:12:39, 29 Nov. (683915.130000) Lease requested 17:12:26, 29 Nov. (683902.330000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:26, 29 Nov. (683902.330000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 46:f9:69:a9:b5:23 via 46:f9:69:a9:b5:23 Lease time: 1440 min. Link rate: 133.2 Mbps 17:12:26, 29 Nov. (683902.260000) Lease requested 17:12:25, 29 Nov. (683901.440000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:25, 29 Nov. (683901.440000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 46:f9:69:a9:b5:23 via 46:f9:69:a9:b5:23 Lease time: 1440 min. Link rate: 110.5 Mbps 17:12:25, 29 Nov. (683901.350000) Lease requested 17:12:25, 29 Nov. ath00: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client associated 17:12:25, 29 Nov. ath00: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client disassociated 17:12:14, 29 Nov. (683889.520000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:14, 29 Nov. (683889.520000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 46:f9:69:a9:b5:23 via 46:f9:69:a9:b5:23 Lease time: 1440 min. Link rate: 110.3 Mbps 17:12:13, 29 Nov. (683889.450000) Lease requested 17:12:13, 29 Nov. (683888.620000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:13, 29 Nov. (683888.620000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 46:f9:69:a9:b5:23 via 46:f9:69:a9:b5:23 Lease time: 1440 min. Link rate: 107.0 Mbps 17:12:13, 29 Nov. (683888.530000) Lease requested 17:12:12, 29 Nov. ath00: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client associated 17:12:12, 29 Nov. ath00: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client disassociated 17:12:03, 29 Nov. OUT: BLOCK [65] First packet is Invalid (Packet not in tcp window: TCP [192.168.1.75]:49301-​>[17.57.146.153]:5223 on ppp3) 17:12:00, 29 Nov. (683875.810000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:12:00, 29 Nov. (683875.810000) Device connected to ath00: Hostname: iPhone IP: 192.168.1.75 MAC: 46:f9:69:a9:b5:23 via 46:f9:69:a9:b5:23 Lease time: 1440 min. Link rate: 105.6 Mbps 17:12:00, 29 Nov. (683875.690000) Lease requested 17:12:00, 29 Nov. ath00: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client associated 17:12:00, 29 Nov. ath00: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client disassociated 17:10:36, 29 Nov. (683792.310000) Device disconnected: Hostname: Unknown-​ce-​a6-​ae-​d7-​d3-​84 IP: 192.168.1.85 MAC: ce:a6:ae:d7:d3:84 17:08:25, 29 Nov. IN: BLOCK [16] Remote administration (ICMP type 8 code 0 113.4.248.205-​>143.159.101.162 on ppp3) 17:06:42, 29 Nov. IN: BLOCK [16] Remote administration (TCP [168.194.129.28]:23791-​>[143.159.101.162]:8080 on ppp3) 17:05:41, 29 Nov. (683497.290000) Device disconnected: Hostname: iPhone IP: 192.168.1.75 MAC: 46:f9:69:a9:b5:23 17:04:32, 29 Nov. (683428.020000) Host iPhone (MAC 46:f9:69:a9:b5:23) using IP 192.168.1.75 detected on interface ath00, port -​1 17:04:32, 29 Nov. ath00: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client associated 17:04:30, 29 Nov. (683426.480000) Lease for IP 192.168.1.75 renewed by host iPhone (MAC 46:f9:69:a9:b5:23). Lease duration: 1440 min 17:04:30, 29 Nov. (683426.470000) Device connected to ath10: Hostname: iPhone IP: 192.168.1.75 MAC: 46:f9:69:a9:b5:23 via 46:f9:69:a9:b5:23 Lease time: 1440 min. Link rate: 866.6 Mbps 17:04:30, 29 Nov. (683426.380000) Lease requested 17:04:30, 29 Nov. ath10: STA 46:f9:69:a9:b5:23 IEEE 802.11: Client associated 17:04:22, 29 Nov. (683418.030000) Host iPhone (MAC 46:f9:69:a9:b5:23) using IP 192.168.1.75 detected on interface ath10, port -​1 17:04:18, 29 Nov. IN: BLOCK [16] Remote administration (TCP [123.205.245.101]:5491-​>[143.159.101.162]:8080 on ppp3) 17:04:12, 29 Nov. (683408.020000) Host iPhone (MAC 46:f9:69:a9:b5:23) using IP 192.168.1.75 detected on interface ath10, port -​1 17:04:02, 29 Nov. (683398.020000) Host iPhone (MAC 46:f9:69:a9:b5:23) using IP 192.168.1.75 detected on interface ath10, port -​1 17:03:52, 29 Nov. (683388.020000) Host iPhone (MAC 46:f9:69:a9:b5:23) using IP 192.168.1.75 detected on interface ath10, port -​1 17:03:42, 29 Nov. (683378.030000) Host iPhone (MAC 46:f9:69:a9:b5:23) using IP 192.168.1.75 detected on interface ath10, port -​1 17:03:32, 29 Nov. (683368.020000) Host iPhone (MAC 46:f9:69:a9:b5:23) using IP 192.168.1.75 detected on interface ath10, port -​1 Next