cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
New Contributor

Hijacked account?

Hi,

My pc was hacked this morning and my Bittrex account was cleaned out. I'm concerned my Hamachi may be compromised as well. Could someone please look over my log? I'm trying to figure out how they got in. I was logged in to my Bittrex at the time. They were certainly roaming around my pc as they deleted 2 confirmations emails (without setting a rule) and I'm guessing forwarded them? These were to confirm the withdraw. They came at 7:30 Am. The engine log started up at  5:46 am and ran pretty active closing at 9:57. This caught my attention ..."07/04 06:34:20.383 [9104] tun: peer 227-701-426 missed a keep-alive on 00000256851BC870, zombi 1"  and several around  it. I can't figure out how to attach lt so I'add it soon.

7 REPLIES 7
New Contributor

Re: Hijacked account?

07/04 02:50:56.230 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 05:46:37.297 [9104] ses: network info, [HACKLEMAN]
07/04 05:46:37.313 [9104] ses: peers 1 items, op DEL
07/04 05:46:37.313 [9104] ses: network info, [hakman22@msn.com]
07/04 05:46:37.313 [9104] ses: peers 1 items, op DEL
07/04 05:46:37.313 [9104] tun: deleting link, type 3, peer 227-701-426
07/04 05:46:37.313 [9104] dbg: link [0000025685231F40] destroy
07/04 05:46:37.313 [9104] tun: deleting link, type 2, peer 227-701-426
07/04 05:46:37.313 [9104] dbg: link [00000256851BC870] destroy
07/04 05:46:37.328 [9104] ses: set tunnel -> setup vpn peer
07/04 05:46:37.328 [9104] ses: [227-701-426], tunnel reset
07/04 05:56:39.010 [9104] ses: io closed
07/04 05:56:39.010 [9104] ses: error 3, retryable yes
07/04 05:56:39.026 [9104] ses: go_offline, keep_tunnels 1, login_on_relaunch 0, actual state 17 ..
07/04 05:56:39.041 [9104] ses: reconnect delay: 24 sec
07/04 05:56:39.072 [9104] ses: select conn mode 'dns lb'
07/04 05:57:03.556 [9104] ses: go_offline, keep_tunnels 1, login_on_relaunch 0, actual state 6 ..
07/04 05:57:03.587 [9104] sys: go_online, reconnect 1
07/04 05:57:03.587 [9104] ses: resolving hamachi-data-center.logmein-gateway.com ..
07/04 05:57:03.759 [9104] ses: resolving hamachi-list.1.logmein-gateway.com ..
07/04 05:57:03.899 [9104] ses: selected (64.94.18.71, 7317)
07/04 05:57:03.915 [9104] ses: trying last-known connection type
07/04 05:57:03.915 [9104] ses: selected 01 connection type
07/04 05:57:03.915 [9104] ses: resolving 64.94.18.71 ..
07/04 05:57:03.946 [9104] ses: connecting to 64.94.18.71:12975 ..
07/04 05:57:04.118 [9104] ses: connection is established
07/04 05:57:04.134 [9104] ses: control connection is bound to 10.1.19.2
07/04 05:57:04.134 [9104] ses: << msg_helo ..
07/04 05:57:04.321 [9104] ses: >> msg_helo, rc 1
07/04 05:57:04.352 [9104] ses: << msg_auth.pwd ..
07/04 05:57:04.696 [9104] ses: >> msg_auth, 1
07/04 05:57:04.712 [9104] ses: bound new udp sock 924 to 10.1.19.2:65491
07/04 05:57:04.712 [9104] ses: bound new icmp sock 1092 to 0.0.0.0:0
07/04 05:57:04.727 [9104] ses: upnp 1 1 1
07/04 05:57:04.727 [9104] ses: << msg_disc ..
07/04 05:57:05.040 [9104] ses: >> msg_udp_preq
07/04 05:57:05.040 [9104] dbg: len 4, dst 64.94.18.71:19281, ttl 64, spi c7f12d49, rc 4, err 0
07/04 05:57:05.071 [9104] dbg: len 4, dst 64.94.18.72:23998, ttl 64, spi aaa32f05, rc 4, err 0
07/04 05:57:05.103 [9104] dbg: len 4, dst 64.94.18.71:30908, ttl 64, spi f8bddc8a, rc 4, err 0
07/04 05:57:07.465 [9104] ses: >> msg_tcp_open, sk 1098235954.0, listener 0
07/04 05:57:07.606 [9104] ses: >> msg_tcp_connect, sk 1098235954.1156, dst 64.94.18.71:55344, raw 0
07/04 05:57:10.106 [9104] ses: >> msg_tcp_close, sk 1098235954.1156
07/04 05:57:10.121 [9104] ses: >> msg_disc, 1
07/04 05:57:10.121 [9104] lge: got logon event: [logon], force: [yes]
07/04 05:57:10.137 [9104] ses: << msg_sync ..

New Contributor

Re: Hijacked account?

07/04 05:57:10.137 [9104] avc: send detect at sync
07/04 05:57:10.137 [9104] ses: sync bits: [20121074]
07/04 05:57:10.137 [9104] nat: drc: 0, nat_udp: 3, nat_udp_type: 1, nat_step: 1, nat_tcp: 3
07/04 05:57:10.731 [9104] ses: >> msg_h2_info, self
07/04 05:57:10.731 [9104] ses: virtual ip 25.18.40.92
07/04 05:57:10.731 [9104] ses: nick MOLLY
07/04 05:57:10.731 [9104] ses: lmi_userid '3DDD2107'
07/04 05:57:10.746 [9104] ses: network info, [HACKLEMAN]
07/04 05:57:10.746 [9104] ses: owner 000-000-000
07/04 05:57:10.746 [9104] ses: bits 0001000e
07/04 05:57:10.762 [9104] ses: perm 00000006
07/04 05:57:10.762 [9104] ses: notice 1, rev 00000000, length 0
07/04 05:57:10.762 [9104] ses: jreqs 0 items, op DEL
07/04 05:57:10.762 [9104] ses: name HACKLEMAN
07/04 05:57:10.762 [9104] ses: netw_own_email [HACKLEMAN]
07/04 05:57:10.762 [9104] ses: nodes 3 items, op ADD
07/04 05:57:10.762 [9104] ses: peers 0 items, op ADD
07/04 05:57:10.762 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 05:57:10.778 [9104] ses: virtual ip 25.4.165.87
07/04 05:57:10.778 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 05:57:10.778 [9104] ses: virtual ip 25.11.95.91
07/04 05:57:10.778 [9104] ses: network info, [hakman22@msn.com]
07/04 05:57:10.778 [9104] ses: owner 000-000-000
07/04 05:57:10.778 [9104] ses: bits 0001000e
07/04 05:57:10.778 [9104] ses: perm 00000006
07/04 05:57:10.778 [9104] ses: notice 1, rev 00000000, length 0
07/04 05:57:10.778 [9104] ses: jreqs 0 items, op DEL
07/04 05:57:10.793 [9104] ses: name hakman22@msn.com
07/04 05:57:10.793 [9104] ses: netw_own_email [hakman22@msn.com]
07/04 05:57:10.793 [9104] ses: nodes 4 items, op ADD
07/04 05:57:10.793 [9104] ses: peers 0 items, op ADD
07/04 05:57:10.809 [9104] ses: << msg_netop 1, [hakman22@msn.com]
07/04 05:57:10.809 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 05:57:10.809 [9104] ses: virtual ip 25.4.165.87
07/04 05:57:10.809 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 05:57:10.824 [9104] ses: virtual ip 25.11.95.91
07/04 05:57:10.824 [9104] ses: >> msg_h2_info, [227-701-058]
07/04 05:57:10.824 [9104] ses: virtual ip 25.0.0.0
07/04 05:57:10.824 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 05:57:10.824 [9104] ses: nick TETRIS
07/04 05:57:10.840 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 05:57:10.840 [9104] ses: nick Molly
07/04 05:57:10.840 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 05:57:10.840 [9104] ses: nick TETRIS
07/04 05:57:10.856 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 05:57:10.871 [9104] ses: nick Molly
07/04 05:57:10.871 [9104] ses: >> msg_h2_info, [227-701-058]
07/04 05:57:10.871 [9104] ses: nick Tetris
07/04 05:57:10.887 [9104] ses: >> msg_sync 1
07/04 05:57:10.903 [9104] sys: found computer GUID ('6FC5C80E-F3E3-40C0-9091-6273F6B14FA6', '232-795-388')
07/04 05:57:10.918 [9104] ses: try online for networks
07/04 05:57:10.934 [9104] ses: network: try_onl: [0], online: [0], dirty: [1], stale: [0], online_pending: [0]
07/04 05:57:10.934 [9104] ses: network: try_onl: [1], online: [0], dirty: [1], stale: [0], online_pending: [1]
07/04 05:57:10.934 [9104] tcp: laggy read, breaking out..
07/04 05:57:11.028 [9104] ses: >> msg_netop 1, rc 1
07/04 05:57:11.090 [9104] ses: >> msg_h7_status, online in [hakman22@msn.com]
07/04 06:01:27.498 [9104] ses: network info, [HACKLEMAN]
07/04 06:01:27.514 [9104] ses: peers 1 items, op ADD
07/04 06:01:27.514 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 06:01:27.514 [9104] ses: virtual ip 25.4.165.87
07/04 06:01:27.514 [9104] ses: bits 20129076
07/04 06:01:27.623 [9104] ses: >> msg_h24_drop_tun, [227-701-426]
07/04 06:01:27.623 [9104] ses: set tunnel -> setup vpn peer
07/04 06:01:27.623 [9104] ses: [227-701-426], tunnel reset
07/04 06:01:27.623 [9104] ses: network info, [hakman22@msn.com]
07/04 06:01:27.623 [9104] ses: peers 1 items, op ADD
07/04 06:01:27.623 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 06:01:27.623 [9104] ses: virtual ip 25.4.165.87
07/04 06:01:27.639 [9104] ses: bits 20129076
07/04 06:01:27.639 [9104] ses: >> msg_h18_peer, op ADD, count 1
07/04 06:01:27.639 [9104] ses: [227-701-426], bits 20129076
07/04 06:01:27.639 [9104] dbg: link [0000025685231F40] create for tunnel [0000025685258BA8]
07/04 06:01:27.639 [9104] ses: new link [server tcp 0d9272b2 0d9272b2]
07/04 06:01:27.639 [9104] ses: [227-701-426], new rddp session
07/04 06:01:27.655 [9104] ses: [ON ] link 0000025685231F40, type 3, tid_o 0d9272b2
07/04 06:01:27.655 [9104] tun: servicing [227-701-426] tunnel
07/04 06:01:27.655 [9104] ses: add link [via_server 0d9272b2]
07/04 06:01:27.655 [9104] tun: servicing [227-701-426] tunnel
07/04 06:01:27.686 [9104] ses: >> msg_udp_preq
07/04 06:01:27.686 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:29.170 [9104] ses: >> msg_udp_preq
07/04 06:01:29.170 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:29.373 [9104] xhg: offer
07/04 06:01:29.373 [9104] xhg: starting new exchange [R c1 12d7 882f]
07/04 06:01:29.373 [9104] xhg: ke_frame
07/04 06:01:29.405 [9104] xhg: creating new sa ..
07/04 06:01:29.420 [9104] xhg: now have (cur, new) (0000 0000, 12d7 882f)
07/04 06:01:29.436 [9104] xhg: completed
07/04 06:01:29.436 [9104] xhg: query of remote test versions ..
07/04 06:01:29.436 [9104] tun: servicing [227-701-426] tunnel
07/04 06:01:29.436 [9104] tun: setting up keep-alives
07/04 06:01:29.436 [9104] tun: initiating AE
07/04 06:01:29.436 [9104] xhg: starting new exchange [I c2 a650 0000]
07/04 06:01:30.060 [9104] tun: promoting new sa
07/04 06:01:30.076 [9104] xhg: new_sa_used, for completed exchange
07/04 06:01:30.373 [9104] xhg: resending (5)..
07/04 06:01:30.576 [9104] xhg: offer
07/04 06:01:30.591 [9104] xhg: symmetrical xchg, we are the initiator
07/04 06:01:31.029 [9104] xhg: offer
07/04 06:01:31.029 [9104] xhg: symmetrical xchg, we are the initiator
07/04 06:01:31.248 [9104] xhg: accept
07/04 06:01:31.248 [9104] xhg: updated exchange [I c2 a650 2ebf]
07/04 06:01:31.248 [9104] xhg: ae_frame, auth 01
07/04 06:01:31.248 [9104] xhg: auth sig is valid
07/04 06:01:31.248 [9104] xhg: now have (old, cur) (12d7 882f, a650 2ebf)
07/04 06:01:31.248 [9104] xhg: completed
07/04 06:01:31.248 [9104] xhg: query of remote test versions ..
07/04 06:01:31.248 [9104] tun: servicing [227-701-426] tunnel
07/04 06:01:31.263 [9104] tun: initiating CE
07/04 06:01:31.263 [9104] xhg: starting new exchange [I c3 5e6f 0000]
07/04 06:01:31.263 [9104] xhg: sending ce 0a
07/04 06:01:31.748 [9104] tun: promoting new sa
07/04 06:01:31.748 [9104] xhg: new_sa_used, for completed exchange
07/04 06:01:31.982 [9104] xhg: offer
07/04 06:01:31.982 [9104] xhg: symmetrical xchg, we are the initiator
07/04 06:01:31.982 [9104] vpn: peer [227-701-426] uses [L3, r 25.4.165.87, l 25.18.40.92], have [L3, r 25.4.165.87, l 25.18.40.92]

New Contributor

Re: Hijacked account?

07/04 06:01:32.232 [9104] xhg: accept
07/04 06:01:32.232 [9104] xhg: updated exchange [I c3 5e6f 845f]
07/04 06:01:32.232 [9104] xhg: received ce 0a
07/04 06:01:32.232 [9104] xhg: creating new sa ..
07/04 06:01:32.232 [9104] xhg: now have (old, cur) (a650 2ebf, 5e6f 845f)
07/04 06:01:32.232 [9104] xhg: completed
07/04 06:01:32.248 [9104] xhg: query of remote test versions ..
07/04 06:01:32.248 [9104] tun: servicing [227-701-426] tunnel
07/04 06:01:33.022 [9104] tun: promoting new sa
07/04 06:01:33.022 [9104] xhg: new_sa_used
07/04 06:01:33.022 [9104] xhg: completed
07/04 06:01:33.022 [9104] xhg: query of remote test versions ..
07/04 06:01:33.022 [9104] tun: servicing [227-701-426] tunnel
07/04 06:01:33.678 [9104] ses: >> msg_udp_preq
07/04 06:01:33.678 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:33.725 [9104] dbg: len 4, dst 64.94.18.71:30000, ttl 64, spi 3ff1c1fc, rc 4, err 0
07/04 06:01:37.245 [9104] ses: >> msg_udp_preq
07/04 06:01:37.245 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:38.735 [9104] ses: >> msg_udp_preq
07/04 06:01:38.738 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:40.227 [9104] ses: >> msg_udp_preq
07/04 06:01:40.242 [9104] dbg: len 4, dst 64.94.18.71:30001, ttl 64, spi 45100f52, rc 4, err 0
07/04 06:01:41.354 [9104] ses: >> msg_udp_preq
07/04 06:01:41.356 [9104] dbg: len 72, dst 97.32.3.118:2626, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:42.850 [9104] ses: >> msg_udp_preq
07/04 06:01:42.852 [9104] dbg: len 72, dst 97.32.3.118:2626, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:44.361 [9104] ses: >> msg_udp_preq
07/04 06:01:44.363 [9104] dbg: len 4, dst 64.94.18.71:30002, ttl 64, spi 78456e84, rc 4, err 0
07/04 06:01:44.845 [9104] ses: >> msg_udp_preq
07/04 06:01:44.845 [9104] dbg: len 72, dst 97.32.3.118:2626, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:46.346 [9104] ses: >> msg_udp_preq
07/04 06:01:46.346 [9104] dbg: len 72, dst 97.32.3.118:2626, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:47.854 [9104] ses: >> msg_udp_preq
07/04 06:01:47.856 [9104] dbg: len 4, dst 64.94.18.71:30003, ttl 64, spi 1f03af29, rc 4, err 0
07/04 06:01:48.122 [9104] ses: >> msg_udp_preq
07/04 06:01:48.122 [9104] dbg: len 72, dst 97.32.3.118:2626, ttl 2, spi c21181e9, rc 72, err 0
07/04 06:01:48.153 [9104] dbg: len 4, dst 64.94.18.71:30004, ttl 64, spi 572bf7ac, rc 4, err 0
07/04 06:01:51.424 [9104] ses: >> msg_udp_preq
07/04 06:01:51.424 [9104] dbg: len 4, dst 64.94.18.71:30005, ttl 64, spi 118bee6a, rc 4, err 0
07/04 06:01:51.659 [9104] ses: >> msg_udp_preq
07/04 06:01:51.659 [9104] dbg: len 72, dst 97.32.3.118:2626, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:01:51.690 [9104] dbg: len 4, dst 64.94.18.71:30006, ttl 64, spi 679cb215, rc 4, err 0
07/04 06:01:54.947 [9104] ses: >> msg_tcp_open, sk 4160071775.0, listener 0
07/04 06:01:55.244 [9104] ses: >> msg_tcp_connect, sk 4160071775.1212, dst 192.168.137.121:49719, raw 1
07/04 06:02:00.239 [9104] ses: >> msg_tcp_close, sk 4160071775.1212
07/04 06:02:00.239 [9104] ses: >> msg_tcp_open, sk 4160073075.0, listener 0
07/04 06:02:00.817 [9104] ses: >> msg_tcp_connect, sk 4160073075.1212, dst 192.168.137.121:49736, raw 1
07/04 06:02:05.968 [9104] ses: >> msg_tcp_close, sk 4160073075.1212
07/04 06:02:05.968 [9104] ses: >> msg_tcp_open, sk 4160074532.0, listener 1
07/04 06:02:11.521 [9104] ses: >> msg_tcp_close, sk 4160074532.1208
07/04 06:02:11.524 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 06:02:13.281 [9104] ses: >> msg_h5_ereq
07/04 06:02:13.283 [9104] udp: 52733df5 -> 64.94.18.72:17771, 76
07/04 06:02:14.261 [9104] ses: >> msg_h5_ereq
07/04 06:02:14.261 [9104] udp: 18f7b7ed -> 64.94.18.72:17771, 76
07/04 06:02:15.268 [9104] ses: >> msg_h5_ereq
07/04 06:02:15.268 [9104] udp: 94462fbd -> 64.94.18.72:17771, 76
07/04 06:02:17.263 [9104] ses: >> msg_tcp_connect, sk 1098238270.0, dst 64.94.18.72:443, raw 0
07/04 06:02:17.654 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 06:02:17.654 [9104] ses: bits 20129076
07/04 06:02:17.669 [9104] ses: status []
07/04 06:02:17.669 [9104] ses: >> msg_h15_peer, [227-701-426], rc 1
07/04 06:02:17.669 [9104] dbg: link [00000256851BC870] create for tunnel [0000025685258BA8]
07/04 06:02:17.669 [9104] ses: new link [relayed tcp 501312e1 21777a17]
07/04 06:02:17.669 [9104] ses: send 501312e1 -> relay
07/04 06:02:17.669 [9104] ses: [off] link 0000025685231F40, type 3, tid_o 0d9272b2
07/04 06:02:17.669 [9104] ses: [ON ] link 00000256851BC870, type 2, tid_o 501312e1
07/04 06:02:17.669 [9104] tun: servicing [227-701-426] tunnel
07/04 06:10:48.156 [9104] ses: >> msg_udp_preq
07/04 06:10:48.171 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:10:49.562 [9104] ses: >> msg_udp_preq
07/04 06:10:49.562 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:10:54.145 [9104] ses: >> msg_udp_preq
07/04 06:10:54.147 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:10:54.170 [9104] dbg: len 4, dst 64.94.18.71:30000, ttl 64, spi 5ec47f38, rc 4, err 0
07/04 06:10:57.646 [9104] ses: >> msg_udp_preq
07/04 06:10:57.646 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:10:59.251 [9104] ses: >> msg_udp_preq
07/04 06:10:59.251 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:11:00.658 [9104] ses: >> msg_udp_preq
07/04 06:11:00.658 [9104] dbg: len 4, dst 64.94.18.71:30001, ttl 64, spi 565a3782, rc 4, err 0
07/04 06:11:01.143 [9104] ses: >> msg_udp_preq
07/04 06:11:01.143 [9104] dbg: len 72, dst 97.32.3.118:2625, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:11:02.668 [9104] ses: >> msg_udp_preq
07/04 06:11:02.683 [9104] dbg: len 72, dst 97.32.3.118:2625, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:11:04.183 [9104] ses: >> msg_udp_preq
07/04 06:11:04.183 [9104] dbg: len 4, dst 64.94.18.71:30002, ttl 64, spi 200ba4c8, rc 4, err 0
07/04 06:11:04.652 [9104] ses: >> msg_udp_preq
07/04 06:11:04.652 [9104] dbg: len 72, dst 97.32.3.118:2625, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:11:06.155 [9104] ses: >> msg_udp_preq
07/04 06:11:06.158 [9104] dbg: len 72, dst 97.32.3.118:2625, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:11:07.648 [9104] ses: >> msg_udp_preq
07/04 06:11:07.648 [9104] dbg: len 4, dst 64.94.18.71:30003, ttl 64, spi 532f4e3f, rc 4, err 0
07/04 06:11:08.015 [9104] ses: >> msg_udp_preq
07/04 06:11:08.017 [9104] dbg: len 72, dst 97.32.3.118:2625, ttl 2, spi c21181e9, rc 72, err 0
07/04 06:11:08.039 [9104] dbg: len 4, dst 64.94.18.71:30004, ttl 64, spi 0be0ac14, rc 4, err 0
07/04 06:11:11.257 [9104] ses: >> msg_udp_preq
07/04 06:11:11.259 [9104] dbg: len 4, dst 64.94.18.71:30005, ttl 64, spi 530acf14, rc 4, err 0
07/04 06:11:11.496 [9104] ses: >> msg_udp_preq
07/04 06:11:11.499 [9104] dbg: len 72, dst 97.32.3.118:2625, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:11:11.533 [9104] dbg: len 4, dst 64.94.18.71:30006, ttl 64, spi 6344f6a9, rc 4, err 0
07/04 06:11:14.756 [9104] ses: >> msg_tcp_open, sk 4160180369.0, listener 0
07/04 06:11:19.755 [9104] ses: >> msg_tcp_close, sk 4160180369.1240
07/04 06:11:19.770 [9104] ses: >> msg_tcp_open, sk 4160181735.0, listener 0
07/04 06:11:20.321 [9104] ses: >> msg_tcp_connect, sk 4160181735.1152, dst 192.168.137.121:49811, raw 1
07/04 06:11:25.320 [9104] ses: >> msg_tcp_close, sk 4160181735.1152
07/04 06:11:25.320 [9104] ses: >> msg_tcp_open, sk 4160182850.0, listener 1
07/04 06:11:30.816 [9104] ses: >> msg_tcp_close, sk 4160182850.1108
07/04 06:11:30.818 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 06:16:50.116 [9104] cfg: save()
07/04 06:16:50.163 [9104] cfg: hks: [0] [2048]
07/04 06:16:50.163 [9104] cfg: hkc: [0] [2048] [2048]
07/04 06:16:50.163 [9104] upd: fetching version info, [https://secure.logmein.com/versioncheck_hamachi.asp?os=win64&majorosver=10&minorosver=0&buildosver=1...] ..
07/04 06:16:50.178 [9104] upd: on_conn_state(connected, 0x0) - 2
07/04 06:16:50.381 [9104] openssl_pipe:Smiley Surprisedpenssl_pipe(): 0000025685A28C30
07/04 06:16:50.756 [9104] ssl: cert ok
07/04 06:16:51.100 [9104] upd: >> 224 bytes
07/04 06:16:51.100 [9104] upd: http transfer completed
07/04 06:16:51.100 [9104] upd: version [2.2.0.633]
07/04 06:16:51.100 [9104] upd: changes [http://help.logmein.com/SelfServiceReleaseNote?product=lmihamachi2]
07/04 06:16:51.100 [9104] upd: package [http://logmeincdn.http.internapcdn.net/logmeincdn/Hamachi_win32_22000633/Hamachi.msi]
07/04 06:16:51.116 [9104] upd: details []
07/04 06:16:51.116 [9104] upd: not updating, have [2.2.0.633], avail [2.2.0.633]
07/04 06:16:51.116 [9104] openssl_pipe::~openssl_pipe(): 0000025685A28C30
07/04 06:19:57.049 [9104] ses: >> msg_udp_preq
07/04 06:19:57.049 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:19:58.536 [9104] ses: >> msg_udp_preq
07/04 06:19:58.552 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:03.038 [9104] ses: >> msg_udp_preq
07/04 06:20:03.053 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:03.084 [9104] dbg: len 4, dst 64.94.18.71:30000, ttl 64, spi 612a687a, rc 4, err 0
07/04 06:20:06.578 [9104] ses: >> msg_udp_preq
07/04 06:20:06.581 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:08.085 [9104] ses: >> msg_udp_preq
07/04 06:20:08.085 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:09.593 [9104] ses: >> msg_udp_preq
07/04 06:20:09.593 [9104] dbg: len 4, dst 64.94.18.71:30001, ttl 64, spi 0e763d62, rc 4, err 0
07/04 06:20:10.108 [9104] ses: >> msg_udp_preq
07/04 06:20:10.108 [9104] dbg: len 72, dst 97.32.3.118:2645, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:11.587 [9104] ses: >> msg_udp_preq
07/04 06:20:11.603 [9104] dbg: len 72, dst 97.32.3.118:2645, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:13.106 [9104] ses: >> msg_udp_preq
07/04 06:20:13.109 [9104] dbg: len 4, dst 64.94.18.71:30002, ttl 64, spi 202029ee, rc 4, err 0
07/04 06:20:13.615 [9104] ses: >> msg_udp_preq
07/04 06:20:13.618 [9104] dbg: len 72, dst 97.32.3.118:2629, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:15.103 [9104] ses: >> msg_udp_preq
07/04 06:20:15.103 [9104] dbg: len 72, dst 97.32.3.118:2629, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:16.601 [9104] ses: >> msg_udp_preq
07/04 06:20:16.601 [9104] dbg: len 4, dst 64.94.18.71:30003, ttl 64, spi 12b6d7de, rc 4, err 0
07/04 06:20:16.835 [9104] ses: >> msg_udp_preq
07/04 06:20:16.851 [9104] dbg: len 72, dst 97.32.3.118:2629, ttl 2, spi c21181e9, rc 72, err 0
07/04 06:20:16.882 [9104] dbg: len 4, dst 64.94.18.71:30004, ttl 64, spi 6f0fd66b, rc 4, err 0
07/04 06:20:20.166 [9104] ses: >> msg_udp_preq
07/04 06:20:20.166 [9104] dbg: len 4, dst 64.94.18.71:30005, ttl 64, spi 4f2f01d1, rc 4, err 0
07/04 06:20:20.498 [9104] ses: >> msg_udp_preq
07/04 06:20:20.513 [9104] dbg: len 72, dst 97.32.3.118:2629, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:20:20.545 [9104] dbg: len 4, dst 64.94.18.71:30006, ttl 64, spi 1a79b400, rc 4, err 0
07/04 06:20:23.772 [9104] ses: >> msg_tcp_open, sk 4160284229.0, listener 0
07/04 06:20:24.037 [9104] ses: >> msg_tcp_connect, sk 4160284229.1488, dst 192.168.137.121:49926, raw 1
07/04 06:20:29.040 [9104] ses: >> msg_tcp_close, sk 4160284229.1488
07/04 06:20:29.040 [9104] ses: >> msg_tcp_open, sk 4160285145.0, listener 0
07/04 06:20:29.730 [9104] ses: >> msg_tcp_connect, sk 4160285145.1492, dst 192.168.137.121:49932, raw 1
07/04 06:20:34.735 [9104] ses: >> msg_tcp_close, sk 4160285145.1492
07/04 06:20:34.735 [9104] ses: >> msg_tcp_open, sk 4160286198.0, listener 1
07/04 06:20:40.263 [9104] ses: >> msg_tcp_close, sk 4160286198.1492
07/04 06:20:40.263 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 06:29:13.308 [9104] ses: >> msg_udp_preq
07/04 06:29:13.308 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:14.844 [9104] ses: >> msg_udp_preq
07/04 06:29:14.848 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:19.318 [9104] ses: >> msg_udp_preq
07/04 06:29:19.318 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:19.349 [9104] dbg: len 4, dst 64.94.18.71:30000, ttl 64, spi 3ff92e78, rc 4, err 0
07/04 06:29:22.827 [9104] ses: >> msg_udp_preq
07/04 06:29:22.829 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:24.323 [9104] ses: >> msg_udp_preq
07/04 06:29:24.323 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:25.836 [9104] ses: >> msg_udp_preq
07/04 06:29:25.838 [9104] dbg: len 4, dst 64.94.18.71:30001, ttl 64, spi 5af49e2e, rc 4, err 0
07/04 06:29:26.294 [9104] ses: >> msg_udp_preq
07/04 06:29:26.356 [9104] dbg: len 72, dst 97.32.3.118:2642, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:27.783 [9104] ses: >> msg_udp_preq
07/04 06:29:27.783 [9104] dbg: len 72, dst 97.32.3.118:2642, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:29.292 [9104] ses: >> msg_udp_preq
07/04 06:29:29.292 [9104] dbg: len 4, dst 64.94.18.71:30002, ttl 64, spi 0d4a5806, rc 4, err 0
07/04 06:29:29.792 [9104] ses: >> msg_udp_preq
07/04 06:29:29.792 [9104] dbg: len 72, dst 97.32.3.118:2642, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:31.358 [9104] ses: >> msg_udp_preq
07/04 06:29:31.358 [9104] dbg: len 72, dst 97.32.3.118:2642, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:32.784 [9104] ses: >> msg_udp_preq
07/04 06:29:32.784 [9104] dbg: len 4, dst 64.94.18.71:30003, ttl 64, spi 06cc1dc4, rc 4, err 0
07/04 06:29:33.033 [9104] ses: >> msg_udp_preq
07/04 06:29:33.036 [9104] dbg: len 72, dst 97.32.3.118:2642, ttl 2, spi c21181e9, rc 72, err 0
07/04 06:29:33.059 [9104] dbg: len 4, dst 64.94.18.71:30004, ttl 64, spi 17538f02, rc 4, err 0
07/04 06:29:36.276 [9104] ses: >> msg_udp_preq
07/04 06:29:36.291 [9104] dbg: len 4, dst 64.94.18.71:30005, ttl 64, spi 68516933, rc 4, err 0
07/04 06:29:36.526 [9104] ses: >> msg_udp_preq
07/04 06:29:36.526 [9104] dbg: len 72, dst 97.32.3.118:2642, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:29:36.573 [9104] dbg: len 4, dst 64.94.18.71:30006, ttl 64, spi 53dad20a, rc 4, err 0
07/04 06:29:39.791 [9104] ses: >> msg_tcp_open, sk 4160392373.0, listener 0
07/04 06:29:40.080 [9104] ses: >> msg_tcp_connect, sk 4160392373.1500, dst 192.168.137.121:49960, raw 1
07/04 06:29:45.128 [9104] ses: >> msg_tcp_close, sk 4160392373.1500

New Contributor

Re: Hijacked account?


07/04 06:29:45.143 [9104] ses: >> msg_tcp_open, sk 4160393423.0, listener 0
07/04 06:29:45.675 [9104] ses: >> msg_tcp_connect, sk 4160393423.1512, dst 192.168.137.121:49962, raw 1
07/04 06:29:50.694 [9104] ses: >> msg_tcp_close, sk 4160393423.1512
07/04 06:29:50.694 [9104] ses: >> msg_tcp_open, sk 4160394488.0, listener 1
07/04 06:29:56.271 [9104] ses: >> msg_tcp_close, sk 4160394488.1512
07/04 06:29:56.271 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 06:34:20.383 [9104] tun: peer 227-701-426 missed a keep-alive on 00000256851BC870, zombi 1
07/04 06:34:20.383 [9104] ses: [ON ] link 0000025685231F40, type 3, tid_o 0d9272b2
07/04 06:34:20.383 [9104] tun: servicing [227-701-426] tunnel
07/04 06:34:43.383 [9104] tun: peer 227-701-426 missed a keep-alive on 00000256851BC870, zombi 2
07/04 06:34:43.385 [9104] tun: (asking server to rebuild the tunnel)
07/04 06:34:43.533 [9104] ses: >> msg_h13_tun, [227-701-426], rc 1
07/04 06:34:43.535 [9104] tun: deleting link, type 2, peer 227-701-426
07/04 06:34:43.537 [9104] dbg: link [00000256851BC870] destroy
07/04 06:34:43.539 [9104] tun: servicing [227-701-426] tunnel
07/04 06:34:43.618 [9104] ses: >> msg_udp_preq
07/04 06:34:43.620 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:34:45.182 [9104] ses: >> msg_udp_preq
07/04 06:34:45.184 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:34:49.662 [9104] ses: >> msg_udp_preq
07/04 06:34:49.662 [9104] dbg: len 72, dst 192.168.137.121:55640, ttl 64, spi c21181e9, rc 72, err 0
07/04 06:34:49.709 [9104] dbg: len 4, dst 64.94.18.71:30000, ttl 64, spi 49beda09, rc 4, err 0
07/04 06:34:55.924 [9104] ses: >> msg_udp_preq
07/04 06:34:55.924 [9104] dbg: len 4, dst 64.94.18.71:30001, ttl 64, spi 508467e6, rc 4, err 0
07/04 06:34:59.913 [9104] ses: >> msg_udp_preq
07/04 06:34:59.929 [9104] dbg: len 4, dst 64.94.18.71:30002, ttl 64, spi 15077c2a, rc 4, err 0
07/04 06:35:03.911 [9104] ses: >> msg_udp_preq
07/04 06:35:03.926 [9104] dbg: len 4, dst 64.94.18.71:30003, ttl 64, spi 187568ab, rc 4, err 0
07/04 06:35:07.991 [9104] ses: >> msg_udp_preq
07/04 06:35:07.991 [9104] dbg: len 4, dst 64.94.18.71:30004, ttl 64, spi 1cfa7ab0, rc 4, err 0
07/04 06:35:11.965 [9104] ses: >> msg_tcp_open, sk 4160457731.0, listener 0
07/04 06:35:16.925 [9104] ses: >> msg_tcp_close, sk 4160457731.1504
07/04 06:35:16.936 [9104] ses: >> msg_tcp_open, sk 4160458375.0, listener 0
07/04 06:35:21.919 [9104] ses: >> msg_tcp_close, sk 4160458375.1184
07/04 06:35:21.935 [9104] ses: >> msg_tcp_open, sk 4160459076.0, listener 1
07/04 06:35:26.933 [9104] ses: >> msg_tcp_close, sk 4160459076.1208
07/04 06:35:26.935 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 06:35:33.645 [9104] ses: >> msg_h5_ereq
07/04 06:35:33.645 [9104] udp: 47e9206e -> 64.94.18.66:17771, 76
07/04 06:35:33.801 [9104] udp: relay pong, from 64.94.18.66:17771, 156 ms
07/04 06:35:37.566 [9104] ses: >> msg_tcp_connect, sk 1098252987.0, dst 64.94.18.66:443, raw 0
07/04 06:37:51.418 [9104] ses: network info, [HACKLEMAN]
07/04 06:37:51.418 [9104] ses: peers 1 items, op DEL
07/04 06:37:51.418 [9104] ses: network info, [hakman22@msn.com]
07/04 06:37:51.418 [9104] ses: peers 1 items, op DEL
07/04 06:37:51.433 [9104] tun: deleting link, type 3, peer 227-701-426
07/04 06:37:51.433 [9104] dbg: link [0000025685231F40] destroy
07/04 06:37:51.433 [9104] ses: set tunnel -> setup vpn peer
07/04 06:37:51.433 [9104] ses: [227-701-426], tunnel reset
07/04 09:56:46.829 [9104] ses: io closed
07/04 09:56:46.831 [9104] ses: error 3, retryable yes
07/04 09:56:46.833 [9104] ses: go_offline, keep_tunnels 1, login_on_relaunch 0, actual state 17 ..
07/04 09:56:46.859 [9104] ses: reconnect delay: 22 sec
07/04 09:56:46.877 [9104] ses: select conn mode 'dns lb'
07/04 09:57:09.288 [9104] ses: go_offline, keep_tunnels 1, login_on_relaunch 0, actual state 6 ..
07/04 09:57:09.395 [9104] sys: go_online, reconnect 1
07/04 09:57:09.407 [9104] ses: resolving hamachi-data-center.logmein-gateway.com ..
07/04 09:57:09.600 [9104] ses: resolving hamachi-list.1.logmein-gateway.com ..
07/04 09:57:09.841 [9104] ses: selected (64.94.18.73, 7062)
07/04 09:57:09.844 [9104] ses: trying last-known connection type
07/04 09:57:09.846 [9104] ses: selected 01 connection type
07/04 09:57:09.854 [9104] ses: resolving 64.94.18.73 ..
07/04 09:57:09.898 [9104] ses: connecting to 64.94.18.73:12975 ..
07/04 09:57:10.080 [9104] ses: connection is established
07/04 09:57:10.090 [9104] ses: control connection is bound to 10.1.19.2
07/04 09:57:10.092 [9104] ses: << msg_helo ..
07/04 09:57:10.653 [9104] ses: >> msg_helo, rc 1
07/04 09:57:10.688 [9104] ses: << msg_auth.pwd ..
07/04 09:57:11.162 [9104] ses: >> msg_auth, 1
07/04 09:57:11.179 [9104] ses: bound new udp sock 1056 to 10.1.19.2:63626
07/04 09:57:11.181 [9104] ses: bound new icmp sock 1260 to 0.0.0.0:0
07/04 09:57:11.183 [9104] ses: upnp 1 1 1
07/04 09:57:11.189 [9104] ses: << msg_disc ..
07/04 09:57:11.422 [9104] ses: >> msg_udp_preq
07/04 09:57:11.425 [9104] dbg: len 4, dst 64.94.18.73:19281, ttl 64, spi 824aff52, rc 4, err 0
07/04 09:57:11.448 [9104] dbg: len 4, dst 64.94.18.74:23998, ttl 64, spi c1f8d176, rc 4, err 0
07/04 09:57:11.470 [9104] dbg: len 4, dst 64.94.18.73:30908, ttl 64, spi f132788e, rc 4, err 0
07/04 09:57:13.870 [9104] ses: >> msg_tcp_open, sk 1099199315.0, listener 0
07/04 09:57:14.131 [9104] ses: >> msg_tcp_connect, sk 1099199315.1280, dst 64.94.18.73:51298, raw 0
07/04 09:57:16.628 [9104] ses: >> msg_tcp_close, sk 1099199315.1280
07/04 09:57:16.631 [9104] ses: >> msg_disc, 1
07/04 09:57:16.644 [9104] lge: got logon event: [logon], force: [yes]
07/04 09:57:16.646 [9104] ses: << msg_sync ..
07/04 09:57:16.652 [9104] avc: send detect at sync
07/04 09:57:16.664 [9104] ses: sync bits: [20121074]
07/04 09:57:16.677 [9104] nat: drc: 0, nat_udp: 3, nat_udp_type: 1, nat_step: 1, nat_tcp: 3
07/04 09:57:17.287 [9104] ses: >> msg_h2_info, self
07/04 09:57:17.290 [9104] ses: virtual ip 25.18.40.92
07/04 09:57:17.292 [9104] ses: nick MOLLY
07/04 09:57:17.294 [9104] ses: lmi_userid '3DDD2107'
07/04 09:57:17.300 [9104] ses: network info, [HACKLEMAN]
07/04 09:57:17.302 [9104] ses: owner 000-000-000
07/04 09:57:17.304 [9104] ses: bits 0001000e
07/04 09:57:17.306 [9104] ses: perm 00000006
07/04 09:57:17.308 [9104] ses: notice 1, rev 00000000, length 0
07/04 09:57:17.310 [9104] ses: jreqs 0 items, op DEL
07/04 09:57:17.313 [9104] ses: name HACKLEMAN
07/04 09:57:17.316 [9104] ses: netw_own_email [HACKLEMAN]
07/04 09:57:17.320 [9104] ses: nodes 3 items, op ADD
07/04 09:57:17.322 [9104] ses: peers 0 items, op ADD
07/04 09:57:17.324 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 09:57:17.327 [9104] ses: virtual ip 25.4.165.87
07/04 09:57:17.330 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 09:57:17.333 [9104] ses: virtual ip 25.11.95.91
07/04 09:57:17.336 [9104] ses: network info, 
07/04 09:57:17.339 [9104] ses: owner 000-000-000
07/04 09:57:17.341 [9104] ses: bits 0001000e
07/04 09:57:17.343 [9104] ses: perm 00000006
07/04 09:57:17.345 [9104] ses: notice 1, rev 00000000, length 0
07/04 09:57:17.348 [9104] ses: jreqs 0 items, op DEL
07/04 09:57:17.352 [9104] ses: name 

New Contributor

Re: Hijacked account?

oooops here  is the earlier parts

 

07/04 01:25:24.516 [9104] dbg: len 72, dst 97.32.1.191:5029, ttl 2, spi 368c2734, rc 72, err 0
07/04 01:25:24.562 [9104] dbg: len 4, dst 64.94.18.67:30004, ttl 64, spi 1a7b21df, rc 4, err 0
07/04 01:25:27.805 [9104] ses: >> msg_udp_preq
07/04 01:25:27.805 [9104] dbg: len 4, dst 64.94.18.67:30005, ttl 64, spi 335ce6e8, rc 4, err 0
07/04 01:25:28.071 [9104] ses: >> msg_udp_preq
07/04 01:25:28.071 [9104] dbg: len 72, dst 97.32.1.191:5029, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:25:28.103 [9104] dbg: len 4, dst 64.94.18.67:30006, ttl 64, spi 2c289daf, rc 4, err 0
07/04 01:25:31.340 [9104] ses: >> msg_tcp_open, sk 4156795795.0, listener 0
07/04 01:25:31.637 [9104] ses: >> msg_tcp_connect, sk 4156795795.1276, dst 192.168.137.121:49704, raw 1
07/04 01:25:36.583 [9104] ses: >> msg_tcp_close, sk 4156795795.1276
07/04 01:25:36.599 [9104] ses: >> msg_tcp_open, sk 4156796715.0, listener 0
07/04 01:25:37.272 [9104] ses: >> msg_tcp_connect, sk 4156796715.1276, dst 192.168.137.121:49705, raw 1
07/04 01:25:42.366 [9104] ses: >> msg_tcp_close, sk 4156796715.1276
07/04 01:25:42.381 [9104] ses: >> msg_tcp_open, sk 4156798176.0, listener 1
07/04 01:25:47.938 [9104] ses: >> msg_tcp_close, sk 4156798176.1128
07/04 01:25:47.938 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 01:25:49.705 [9104] ses: >> msg_h5_ereq
07/04 01:25:49.705 [9104] udp: bce30c12 -> 64.94.18.70:17771, 76
07/04 01:25:50.689 [9104] ses: >> msg_h5_ereq
07/04 01:25:50.705 [9104] udp: 5366a121 -> 64.94.18.70:17771, 76
07/04 01:25:51.689 [9104] ses: >> msg_h5_ereq
07/04 01:25:51.689 [9104] udp: fce41042 -> 64.94.18.70:17771, 76
07/04 01:25:53.597 [9104] ses: >> msg_tcp_connect, sk 1097819066.0, dst 64.94.18.70:443, raw 0
07/04 01:25:54.003 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 01:25:54.003 [9104] ses: bits 20129076
07/04 01:25:54.003 [9104] ses: status []
07/04 01:25:54.003 [9104] ses: >> msg_h15_peer, [227-701-426], rc 1
07/04 01:25:54.018 [9104] dbg: link [00000256851BC870] create for tunnel [0000025685258BA8]
07/04 01:25:54.018 [9104] ses: new link [relayed tcp c8e5275f f43c8545]
07/04 01:25:54.018 [9104] ses: send c8e5275f -> relay
07/04 01:25:54.018 [9104] ses: [off] link 0000025685231F40, type 3, tid_o 0d9272b2
07/04 01:25:54.018 [9104] ses: [ON ] link 00000256851BC870, type 2, tid_o c8e5275f
07/04 01:25:54.018 [9104] tun: servicing [227-701-426] tunnel
07/04 01:34:17.372 [9104] ses: >> msg_udp_preq
07/04 01:34:17.372 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:18.872 [9104] ses: >> msg_udp_preq
07/04 01:34:18.872 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:23.375 [9104] ses: >> msg_udp_preq
07/04 01:34:23.375 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:23.422 [9104] dbg: len 4, dst 64.94.18.67:30000, ttl 64, spi 35ddf01c, rc 4, err 0
07/04 01:34:26.928 [9104] ses: >> msg_udp_preq
07/04 01:34:26.943 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:28.428 [9104] ses: >> msg_udp_preq
07/04 01:34:28.443 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:29.943 [9104] ses: >> msg_udp_preq
07/04 01:34:29.943 [9104] dbg: len 4, dst 64.94.18.67:30001, ttl 64, spi 338405e7, rc 4, err 0
07/04 01:34:30.584 [9104] ses: >> msg_udp_preq
07/04 01:34:30.584 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:32.075 [9104] ses: >> msg_udp_preq
07/04 01:34:32.090 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:33.575 [9104] ses: >> msg_udp_preq
07/04 01:34:33.590 [9104] dbg: len 4, dst 64.94.18.67:30002, ttl 64, spi 48fc4708, rc 4, err 0
07/04 01:34:34.122 [9104] ses: >> msg_udp_preq
07/04 01:34:34.122 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:35.621 [9104] ses: >> msg_udp_preq
07/04 01:34:35.621 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:37.120 [9104] ses: >> msg_udp_preq
07/04 01:34:37.120 [9104] dbg: len 4, dst 64.94.18.67:30003, ttl 64, spi 502e15ac, rc 4, err 0
07/04 01:34:37.386 [9104] ses: >> msg_udp_preq
07/04 01:34:37.386 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 2, spi 368c2734, rc 72, err 0
07/04 01:34:37.417 [9104] dbg: len 4, dst 64.94.18.67:30004, ttl 64, spi 30740c89, rc 4, err 0
07/04 01:34:40.641 [9104] ses: >> msg_udp_preq
07/04 01:34:40.657 [9104] dbg: len 4, dst 64.94.18.67:30005, ttl 64, spi 0e84a414, rc 4, err 0
07/04 01:34:40.938 [9104] ses: >> msg_udp_preq
07/04 01:34:40.953 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:34:40.985 [9104] dbg: len 4, dst 64.94.18.67:30006, ttl 64, spi 667ac434, rc 4, err 0
07/04 01:34:44.219 [9104] ses: >> msg_tcp_open, sk 4156913713.0, listener 0
07/04 01:34:44.626 [9104] ses: >> msg_tcp_connect, sk 4156913713.1088, dst 192.168.137.121:49791, raw 1
07/04 01:34:49.532 [9104] ses: >> msg_tcp_close, sk 4156913713.1088
07/04 01:34:49.532 [9104] ses: >> msg_tcp_open, sk 4156914881.0, listener 0
07/04 01:34:49.985 [9104] ses: >> msg_tcp_connect, sk 4156914881.1252, dst 192.168.137.121:49792, raw 1
07/04 01:34:54.992 [9104] ses: >> msg_tcp_close, sk 4156914881.1252
07/04 01:34:54.992 [9104] ses: >> msg_tcp_open, sk 4156915878.0, listener 1
07/04 01:35:00.573 [9104] ses: >> msg_tcp_close, sk 4156915878.1168
07/04 01:35:00.589 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 01:43:31.544 [9104] ses: >> msg_udp_preq
07/04 01:43:31.544 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:33.038 [9104] ses: >> msg_udp_preq
07/04 01:43:33.053 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:37.549 [9104] ses: >> msg_udp_preq
07/04 01:43:37.549 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:37.580 [9104] dbg: len 4, dst 64.94.18.67:30000, ttl 64, spi 28bcb1e5, rc 4, err 0
07/04 01:43:41.054 [9104] ses: >> msg_udp_preq
07/04 01:43:41.054 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:42.913 [9104] ses: >> msg_udp_preq
07/04 01:43:42.913 [9104] dbg: len 72, dst 192.168.137.121:62684, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:45.038 [9104] ses: >> msg_udp_preq
07/04 01:43:45.038 [9104] dbg: len 4, dst 64.94.18.67:30001, ttl 64, spi 169a6112, rc 4, err 0
07/04 01:43:45.617 [9104] ses: >> msg_udp_preq
07/04 01:43:45.617 [9104] dbg: len 72, dst 97.32.1.191:5050, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:47.117 [9104] ses: >> msg_udp_preq
07/04 01:43:47.117 [9104] dbg: len 72, dst 97.32.1.191:5050, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:48.915 [9104] ses: >> msg_udp_preq
07/04 01:43:48.930 [9104] dbg: len 4, dst 64.94.18.67:30002, ttl 64, spi 202db920, rc 4, err 0
07/04 01:43:49.821 [9104] ses: >> msg_udp_preq
07/04 01:43:49.821 [9104] dbg: len 72, dst 97.32.1.191:5050, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:51.352 [9104] ses: >> msg_udp_preq
07/04 01:43:51.352 [9104] dbg: len 72, dst 97.32.1.191:5050, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:53.164 [9104] ses: >> msg_udp_preq
07/04 01:43:53.164 [9104] dbg: len 4, dst 64.94.18.67:30003, ttl 64, spi 4f9c523a, rc 4, err 0
07/04 01:43:53.414 [9104] ses: >> msg_udp_preq
07/04 01:43:53.414 [9104] dbg: len 72, dst 97.32.1.191:5050, ttl 2, spi 368c2734, rc 72, err 0
07/04 01:43:53.446 [9104] dbg: len 4, dst 64.94.18.67:30004, ttl 64, spi 76c2da8c, rc 4, err 0
07/04 01:43:56.660 [9104] ses: >> msg_udp_preq
07/04 01:43:56.660 [9104] dbg: len 4, dst 64.94.18.67:30005, ttl 64, spi 0ffe0ade, rc 4, err 0
07/04 01:43:56.930 [9104] ses: >> msg_udp_preq
07/04 01:43:56.946 [9104] dbg: len 72, dst 97.32.1.191:5050, ttl 64, spi 368c2734, rc 72, err 0
07/04 01:43:56.977 [9104] dbg: len 4, dst 64.94.18.67:30006, ttl 64, spi 11653e4e, rc 4, err 0
07/04 01:44:00.197 [9104] ses: >> msg_tcp_open, sk 4157027063.0, listener 0
07/04 01:44:00.477 [9104] ses: >> msg_tcp_connect, sk 4157027063.1164, dst 192.168.137.121:50017, raw 1
07/04 01:44:05.768 [9104] ses: >> msg_tcp_close, sk 4157027063.1164
07/04 01:44:05.768 [9104] ses: >> msg_tcp_open, sk 4157028265.0, listener 0
07/04 01:44:06.799 [9104] ses: >> msg_tcp_connect, sk 4157028265.728, dst 192.168.137.121:50018, raw 1
07/04 01:44:11.794 [9104] ses: >> msg_tcp_close, sk 4157028265.728
07/04 01:44:11.794 [9104] ses: >> msg_tcp_open, sk 4157029450.0, listener 1
07/04 01:44:17.462 [9104] ses: >> msg_tcp_close, sk 4157029450.1164
07/04 01:44:17.462 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 01:47:54.406 [9104] tun: peer 227-701-426 missed a keep-alive on 00000256851BC870, zombi 1
07/04 01:47:54.406 [9104] ses: [ON ] link 0000025685231F40, type 3, tid_o 0d9272b2
07/04 01:47:54.406 [9104] tun: servicing [227-701-426] tunnel
07/04 01:48:17.412 [9104] tun: peer 227-701-426 missed a keep-alive on 00000256851BC870, zombi 2
07/04 01:48:17.412 [9104] tun: (asking server to rebuild the tunnel)
07/04 01:48:40.419 [9104] tun: peer 227-701-426 missed a keep-alive on 00000256851BC870, zombi 3
07/04 01:48:40.419 [9104] tun: deleting link, type 2, peer 227-701-426
07/04 01:48:40.419 [9104] dbg: link [00000256851BC870] destroy
07/04 01:48:40.419 [9104] tun: servicing [227-701-426] tunnel
07/04 02:03:42.243 [9104] ses: io closed
07/04 02:03:42.243 [9104] ses: error 3, retryable yes
07/04 02:03:42.243 [9104] ses: go_offline, keep_tunnels 1, login_on_relaunch 0, actual state 17 ..
07/04 02:03:42.321 [9104] tun: deleting link, type 3, peer 227-701-426
07/04 02:03:42.336 [9104] dbg: link [0000025685231F40] destroy
07/04 02:03:42.336 [9104] ses: set tunnel -> setup vpn peer
07/04 02:03:42.336 [9104] ses: [227-701-426], tunnel reset
07/04 02:03:42.352 [9104] ses: reconnect delay: 26 sec
07/04 02:03:42.368 [9104] ses: select conn mode 'dns lb'
07/04 02:04:09.089 [9104] ses: go_offline, keep_tunnels 1, login_on_relaunch 0, actual state 6 ..
07/04 02:04:09.120 [9104] sys: go_online, reconnect 1
07/04 02:04:09.136 [9104] ses: resolving hamachi-data-center.logmein-gateway.com ..
07/04 02:04:09.448 [9104] ses: resolving hamachi-list.1.logmein-gateway.com ..
07/04 02:04:09.605 [9104] ses: selected (64.94.18.73, 7543)
07/04 02:04:09.605 [9104] ses: trying last-known connection type
07/04 02:04:09.605 [9104] ses: selected 01 connection type
07/04 02:04:09.620 [9104] ses: resolving 64.94.18.73 ..
07/04 02:04:09.651 [9104] ses: connecting to 64.94.18.73:12975 ..
07/04 02:04:09.839 [9104] ses: connection is established
07/04 02:04:09.855 [9104] ses: control connection is bound to 10.1.19.2
07/04 02:04:09.855 [9104] ses: << msg_helo ..
07/04 02:04:10.074 [9104] ses: >> msg_helo, rc 1
07/04 02:04:10.105 [9104] ses: << msg_auth.pwd ..
07/04 02:04:10.433 [9104] ses: >> msg_auth, 1
07/04 02:04:10.448 [9104] ses: bound new udp sock 1296 to 10.1.19.2:64167
07/04 02:04:10.448 [9104] ses: bound new icmp sock 728 to 0.0.0.0:0
07/04 02:04:10.464 [9104] ses: upnp 1 1 1
07/04 02:04:10.464 [9104] ses: << msg_disc ..
07/04 02:04:10.730 [9104] ses: >> msg_udp_preq
07/04 02:04:10.730 [9104] dbg: len 4, dst 64.94.18.73:19281, ttl 64, spi f8ebc4bd, rc 4, err 0
07/04 02:04:10.761 [9104] dbg: len 4, dst 64.94.18.74:23998, ttl 64, spi c0c91f00, rc 4, err 0
07/04 02:04:10.792 [9104] dbg: len 4, dst 64.94.18.73:30908, ttl 64, spi c24210d5, rc 4, err 0
07/04 02:04:13.339 [9104] ses: >> msg_tcp_open, sk 1099015230.0, listener 0
07/04 02:04:13.512 [9104] ses: >> msg_tcp_connect, sk 1099015230.1272, dst 64.94.18.73:50103, raw 0
07/04 02:04:15.997 [9104] ses: >> msg_tcp_close, sk 1099015230.1272
07/04 02:04:15.997 [9104] ses: >> msg_disc, 1
07/04 02:04:16.012 [9104] lge: got logon event: [logon], force: [yes]
07/04 02:04:16.012 [9104] ses: << msg_sync ..
07/04 02:04:16.012 [9104] avc: send detect at sync
07/04 02:04:16.012 [9104] ses: sync bits: [20121074]
07/04 02:04:16.028 [9104] nat: drc: 0, nat_udp: 3, nat_udp_type: 1, nat_step: 1, nat_tcp: 3
07/04 02:04:16.684 [9104] ses: >> msg_h2_info, self
07/04 02:04:16.684 [9104] ses: virtual ip 25.18.40.92
07/04 02:04:16.684 [9104] ses: nick MOLLY
07/04 02:04:16.700 [9104] ses: lmi_userid '3DDD2107'
07/04 02:04:16.715 [9104] ses: network info, [HACKLEMAN]
07/04 02:04:16.715 [9104] ses: owner 000-000-000
07/04 02:04:16.715 [9104] ses: bits 0001000e
07/04 02:04:16.715 [9104] ses: perm 00000006
07/04 02:04:16.715 [9104] ses: notice 1, rev 00000000, length 0
07/04 02:04:16.715 [9104] ses: jreqs 0 items, op DEL
07/04 02:04:16.715 [9104] ses: name HACKLEMAN
07/04 02:04:16.715 [9104] ses: netw_own_email [HACKLEMAN]
07/04 02:04:16.731 [9104] ses: nodes 3 items, op ADD
07/04 02:04:16.731 [9104] ses: peers 1 items, op ADD
07/04 02:04:16.731 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 02:04:16.731 [9104] ses: virtual ip 25.4.165.87
07/04 02:04:16.731 [9104] ses: bits 20129076
07/04 02:04:16.731 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 02:04:16.746 [9104] ses: virtual ip 25.11.95.91
07/04 02:04:16.746 [9104] ses: network info, [hakman22@msn.com]
07/04 02:04:16.746 [9104] ses: owner 000-000-000
07/04 02:04:16.746 [9104] ses: bits 0001000e
07/04 02:04:16.746 [9104] ses: perm 00000006
07/04 02:04:16.746 [9104] ses: notice 1, rev 00000000, length 0
07/04 02:04:16.762 [9104] ses: jreqs 0 items, op DEL
07/04 02:04:16.762 [9104] ses: name hakman22@msn.com
07/04 02:04:16.762 [9104] ses: netw_own_email [hakman22@msn.com]

New Contributor

Re: Hijacked account?

07/04 02:04:16.762 [9104] ses: nodes 4 items, op ADD
07/04 02:04:16.762 [9104] ses: peers 1 items, op ADD
07/04 02:04:16.778 [9104] ses: << msg_netop 1, [hakman22@msn.com]
07/04 02:04:16.778 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 02:04:16.778 [9104] ses: virtual ip 25.4.165.87
07/04 02:04:16.778 [9104] ses: bits 20129076
07/04 02:04:16.778 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 02:04:16.778 [9104] ses: virtual ip 25.11.95.91
07/04 02:04:16.793 [9104] ses: >> msg_h2_info, [227-701-058]
07/04 02:04:16.793 [9104] ses: virtual ip 25.0.0.0
07/04 02:04:16.793 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 02:04:16.793 [9104] ses: nick TETRIS
07/04 02:04:16.793 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 02:04:16.793 [9104] ses: nick Molly
07/04 02:04:16.793 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 02:04:16.809 [9104] ses: nick TETRIS
07/04 02:04:16.809 [9104] ses: >> msg_h2_info, [218-656-317]
07/04 02:04:16.809 [9104] ses: nick Molly
07/04 02:04:16.809 [9104] ses: >> msg_h2_info, [227-701-058]
07/04 02:04:16.809 [9104] ses: nick Tetris
07/04 02:04:16.809 [9104] ses: >> msg_sync 1
07/04 02:04:16.856 [9104] sys: found computer GUID ('6FC5C80E-F3E3-40C0-9091-6273F6B14FA6', '232-795-388')
07/04 02:04:16.856 [9104] ses: try online for networks
07/04 02:04:16.871 [9104] ses: network: try_onl: [0], online: [0], dirty: [1], stale: [0], online_pending: [0]
07/04 02:04:16.871 [9104] ses: network: try_onl: [1], online: [0], dirty: [1], stale: [0], online_pending: [1]
07/04 02:04:16.871 [9104] tcp: laggy read, breaking out..
07/04 02:04:17.028 [9104] ses: >> msg_netop 1, rc 1
07/04 02:04:17.043 [9104] ses: >> msg_h7_status, online in [hakman22@msn.com]
07/04 02:04:17.059 [9104] ses: >> msg_h24_drop_tun, [227-701-426]
07/04 02:04:17.059 [9104] ses: set tunnel -> setup vpn peer
07/04 02:04:17.059 [9104] ses: [227-701-426], tunnel reset
07/04 02:04:17.059 [9104] ses: >> msg_h18_peer, op ADD, count 1
07/04 02:04:17.059 [9104] ses: [227-701-426], bits 20129076
07/04 02:04:17.059 [9104] dbg: link [0000025685231F40] create for tunnel [0000025685258BA8]
07/04 02:04:17.059 [9104] ses: new link [server tcp 0d9272b2 0d9272b2]
07/04 02:04:17.059 [9104] ses: [227-701-426], new rddp session
07/04 02:04:17.059 [9104] ses: [ON ] link 0000025685231F40, type 3, tid_o 0d9272b2
07/04 02:04:17.059 [9104] tun: servicing [227-701-426] tunnel
07/04 02:04:17.075 [9104] ses: add link [via_server 0d9272b2]
07/04 02:04:17.075 [9104] tun: servicing [227-701-426] tunnel
07/04 02:04:17.215 [9104] ses: >> msg_udp_preq
07/04 02:04:17.215 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:18.690 [9104] tun: initiating KE
07/04 02:04:18.690 [9104] xhg: starting new exchange [I c1 8c3d 0000]
07/04 02:04:18.706 [9104] ses: >> msg_udp_preq
07/04 02:04:18.706 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:19.159 [9104] xhg: accept
07/04 02:04:19.159 [9104] xhg: updated exchange [I c1 8c3d 4ed0]
07/04 02:04:19.159 [9104] xhg: ke_frame
07/04 02:04:19.159 [9104] xhg: creating new sa ..
07/04 02:04:19.190 [9104] xhg: now have (old, cur) (0000 0000, 8c3d 4ed0)
07/04 02:04:19.190 [9104] xhg: completed
07/04 02:04:19.190 [9104] xhg: query of remote test versions ..
07/04 02:04:19.190 [9104] tun: servicing [227-701-426] tunnel
07/04 02:04:19.190 [9104] tun: setting up keep-alives
07/04 02:04:19.190 [9104] tun: initiating AE
07/04 02:04:19.190 [9104] xhg: starting new exchange [I c2 7d8c 0000]
07/04 02:04:19.862 [9104] tun: promoting new sa
07/04 02:04:19.862 [9104] xhg: new_sa_used, for completed exchange
07/04 02:04:19.862 [9104] xhg: accept
07/04 02:04:19.862 [9104] xhg: updated exchange [I c2 7d8c 8889]
07/04 02:04:19.862 [9104] xhg: ae_frame, auth 01
07/04 02:04:19.862 [9104] xhg: auth sig is valid
07/04 02:04:19.862 [9104] xhg: now have (old, cur) (8c3d 4ed0, 7d8c 8889)
07/04 02:04:19.862 [9104] xhg: completed
07/04 02:04:19.862 [9104] xhg: query of remote test versions ..
07/04 02:04:19.877 [9104] tun: servicing [227-701-426] tunnel
07/04 02:04:19.877 [9104] tun: initiating CE
07/04 02:04:19.877 [9104] xhg: starting new exchange [I c3 a1e7 0000]
07/04 02:04:19.877 [9104] xhg: sending ce 0a
07/04 02:04:20.253 [9104] tun: promoting new sa
07/04 02:04:20.253 [9104] xhg: new_sa_used, for completed exchange
07/04 02:04:20.487 [9104] xhg: offer
07/04 02:04:20.487 [9104] xhg: symmetrical xchg, we are the initiator
07/04 02:04:20.503 [9104] vpn: peer [227-701-426] uses [L3, r 25.4.165.87, l 25.18.40.92], have [L3, r 25.4.165.87, l 25.18.40.92]
07/04 02:04:20.768 [9104] xhg: accept
07/04 02:04:20.768 [9104] xhg: updated exchange [I c3 a1e7 fc28]
07/04 02:04:20.768 [9104] xhg: received ce 0a
07/04 02:04:20.768 [9104] xhg: creating new sa ..
07/04 02:04:20.768 [9104] xhg: now have (old, cur) (7d8c 8889, a1e7 fc28)
07/04 02:04:20.768 [9104] xhg: completed
07/04 02:04:20.768 [9104] xhg: query of remote test versions ..
07/04 02:04:20.784 [9104] tun: servicing [227-701-426] tunnel
07/04 02:04:21.440 [9104] tun: promoting new sa
07/04 02:04:21.456 [9104] xhg: new_sa_used
07/04 02:04:21.456 [9104] xhg: completed
07/04 02:04:21.456 [9104] xhg: query of remote test versions ..
07/04 02:04:21.456 [9104] tun: servicing [227-701-426] tunnel
07/04 02:04:23.202 [9104] ses: >> msg_udp_preq
07/04 02:04:23.217 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:23.249 [9104] dbg: len 4, dst 64.94.18.73:30000, ttl 64, spi 4095883c, rc 4, err 0
07/04 02:04:26.744 [9104] ses: >> msg_udp_preq
07/04 02:04:26.744 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:28.246 [9104] ses: >> msg_udp_preq
07/04 02:04:28.246 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:29.746 [9104] ses: >> msg_udp_preq
07/04 02:04:29.746 [9104] dbg: len 4, dst 64.94.18.73:30001, ttl 64, spi 3949ba57, rc 4, err 0
07/04 02:04:30.387 [9104] ses: >> msg_udp_preq
07/04 02:04:30.387 [9104] dbg: len 72, dst 97.32.1.191:5046, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:31.809 [9104] ses: >> msg_udp_preq
07/04 02:04:31.809 [9104] dbg: len 72, dst 97.32.1.191:5046, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:33.319 [9104] ses: >> msg_udp_preq
07/04 02:04:33.321 [9104] dbg: len 4, dst 64.94.18.73:30002, ttl 64, spi 2cb91252, rc 4, err 0
07/04 02:04:33.913 [9104] ses: >> msg_udp_preq
07/04 02:04:33.913 [9104] dbg: len 72, dst 97.32.1.191:5046, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:35.420 [9104] ses: >> msg_udp_preq
07/04 02:04:35.420 [9104] dbg: len 72, dst 97.32.1.191:5046, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:36.920 [9104] ses: >> msg_udp_preq
07/04 02:04:36.920 [9104] dbg: len 4, dst 64.94.18.73:30003, ttl 64, spi 2e645cd2, rc 4, err 0
07/04 02:04:37.193 [9104] ses: >> msg_udp_preq
07/04 02:04:37.193 [9104] dbg: len 72, dst 97.32.1.191:5046, ttl 2, spi d64041b5, rc 72, err 0
07/04 02:04:37.225 [9104] dbg: len 4, dst 64.94.18.73:30004, ttl 64, spi 57392ade, rc 4, err 0
07/04 02:04:40.628 [9104] ses: >> msg_udp_preq
07/04 02:04:40.628 [9104] dbg: len 4, dst 64.94.18.73:30005, ttl 64, spi 5b42cadc, rc 4, err 0
07/04 02:04:40.893 [9104] ses: >> msg_udp_preq
07/04 02:04:40.893 [9104] dbg: len 72, dst 97.32.1.191:5046, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:04:40.940 [9104] dbg: len 4, dst 64.94.18.73:30006, ttl 64, spi 1b1f4cca, rc 4, err 0
07/04 02:04:44.207 [9104] ses: >> msg_tcp_open, sk 4157283539.0, listener 0
07/04 02:04:44.488 [9104] ses: >> msg_tcp_connect, sk 4157283539.1112, dst 192.168.137.121:50049, raw 1
07/04 02:04:49.474 [9104] ses: >> msg_tcp_close, sk 4157283539.1112
07/04 02:04:49.474 [9104] ses: >> msg_tcp_open, sk 4157284525.0, listener 0
07/04 02:04:49.990 [9104] ses: >> msg_tcp_connect, sk 4157284525.920, dst 192.168.137.121:50050, raw 1
07/04 02:04:55.002 [9104] ses: >> msg_tcp_close, sk 4157284525.920
07/04 02:04:55.002 [9104] ses: >> msg_tcp_open, sk 4157285634.0, listener 1
07/04 02:05:00.611 [9104] ses: >> msg_tcp_close, sk 4157285634.924
07/04 02:05:00.611 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 02:05:02.391 [9104] ses: >> msg_h5_ereq
07/04 02:05:02.391 [9104] udp: 470585c6 -> 64.94.18.74:17771, 76
07/04 02:05:03.375 [9104] ses: >> msg_h5_ereq
07/04 02:05:03.391 [9104] udp: 80ec4a9c -> 64.94.18.74:17771, 76
07/04 02:05:04.385 [9104] ses: >> msg_h5_ereq
07/04 02:05:04.385 [9104] udp: a04c9a3e -> 64.94.18.74:17771, 76
07/04 02:05:06.291 [9104] ses: >> msg_tcp_connect, sk 1099015360.0, dst 64.94.18.74:443, raw 0
07/04 02:05:06.697 [9104] ses: >> msg_h2_info, [227-701-426]
07/04 02:05:06.697 [9104] ses: bits 20129076
07/04 02:05:06.697 [9104] ses: status []
07/04 02:05:06.697 [9104] ses: >> msg_h15_peer, [227-701-426], rc 1
07/04 02:05:06.697 [9104] dbg: link [00000256851BC870] create for tunnel [0000025685258BA8]
07/04 02:05:06.713 [9104] ses: new link [relayed tcp 2029360d e02a60e4]
07/04 02:05:06.713 [9104] ses: send 2029360d -> relay
07/04 02:05:06.713 [9104] ses: [off] link 0000025685231F40, type 3, tid_o 0d9272b2
07/04 02:05:06.713 [9104] ses: [ON ] link 00000256851BC870, type 2, tid_o 2029360d
07/04 02:05:06.713 [9104] tun: servicing [227-701-426] tunnel
07/04 02:13:35.563 [9104] ses: >> msg_udp_preq
07/04 02:13:35.563 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:37.057 [9104] ses: >> msg_udp_preq
07/04 02:13:37.057 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:41.565 [9104] ses: >> msg_udp_preq
07/04 02:13:41.565 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:41.597 [9104] dbg: len 4, dst 64.94.18.73:30000, ttl 64, spi 567c098e, rc 4, err 0
07/04 02:13:45.191 [9104] ses: >> msg_udp_preq
07/04 02:13:45.191 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:46.755 [9104] ses: >> msg_udp_preq

07/04 02:13:46.755 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:48.271 [9104] ses: >> msg_udp_preq
07/04 02:13:48.286 [9104] dbg: len 4, dst 64.94.18.73:30001, ttl 64, spi 595422b7, rc 4, err 0
07/04 02:13:48.848 [9104] ses: >> msg_udp_preq
07/04 02:13:48.848 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:50.395 [9104] ses: >> msg_udp_preq
07/04 02:13:50.395 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:51.849 [9104] ses: >> msg_udp_preq
07/04 02:13:51.849 [9104] dbg: len 4, dst 64.94.18.73:30002, ttl 64, spi 1b5b5794, rc 4, err 0
07/04 02:13:52.428 [9104] ses: >> msg_udp_preq
07/04 02:13:52.443 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:53.941 [9104] ses: >> msg_udp_preq
07/04 02:13:53.941 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:55.439 [9104] ses: >> msg_udp_preq
07/04 02:13:55.439 [9104] dbg: len 4, dst 64.94.18.73:30003, ttl 64, spi 7401694b, rc 4, err 0
07/04 02:13:55.736 [9104] ses: >> msg_udp_preq
07/04 02:13:55.736 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 2, spi d64041b5, rc 72, err 0
07/04 02:13:55.767 [9104] dbg: len 4, dst 64.94.18.73:30004, ttl 64, spi 41a2d5d2, rc 4, err 0
07/04 02:13:59.048 [9104] ses: >> msg_udp_preq
07/04 02:13:59.063 [9104] dbg: len 4, dst 64.94.18.73:30005, ttl 64, spi 2a253b9e, rc 4, err 0
07/04 02:13:59.329 [9104] ses: >> msg_udp_preq
07/04 02:13:59.329 [9104] dbg: len 72, dst 97.32.1.191:5035, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:13:59.361 [9104] dbg: len 4, dst 64.94.18.73:30006, ttl 64, spi 13bb87be, rc 4, err 0
07/04 02:14:02.604 [9104] ses: >> msg_tcp_open, sk 4157401407.0, listener 0
07/04 02:14:02.885 [9104] ses: >> msg_tcp_connect, sk 4157401407.1268, dst 192.168.137.121:50084, raw 1
07/04 02:14:07.893 [9104] ses: >> msg_tcp_close, sk 4157401407.1268
07/04 02:14:07.893 [9104] ses: >> msg_tcp_open, sk 4157402511.0, listener 0
07/04 02:14:08.564 [9104] ses: >> msg_tcp_connect, sk 4157402511.1268, dst 192.168.137.121:50085, raw 1
07/04 02:14:13.557 [9104] ses: >> msg_tcp_close, sk 4157402511.1268
07/04 02:14:13.572 [9104] ses: >> msg_tcp_open, sk 4157403776.0, listener 1
07/04 02:14:19.082 [9104] ses: >> msg_tcp_close, sk 4157403776.1260
07/04 02:14:19.082 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 02:22:42.385 [9104] ses: >> msg_udp_preq
07/04 02:22:42.448 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:22:43.885 [9104] ses: >> msg_udp_preq
07/04 02:22:43.885 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:22:48.385 [9104] ses: >> msg_udp_preq
07/04 02:22:48.385 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:22:48.417 [9104] dbg: len 4, dst 64.94.18.73:30000, ttl 64, spi 038fb350, rc 4, err 0
07/04 02:22:51.933 [9104] ses: >> msg_udp_preq
07/04 02:22:51.933 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:22:53.436 [9104] ses: >> msg_udp_preq
07/04 02:22:53.436 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:22:54.937 [9104] ses: >> msg_udp_preq
07/04 02:22:54.937 [9104] dbg: len 4, dst 64.94.18.73:30001, ttl 64, spi 42666d08, rc 4, err 0
07/04 02:22:55.547 [9104] ses: >> msg_udp_preq
07/04 02:22:55.547 [9104] dbg: len 72, dst 97.32.1.191:5052, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:22:57.062 [9104] ses: >> msg_udp_preq
07/04 02:22:57.062 [9104] dbg: len 72, dst 97.32.1.191:5052, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:22:58.555 [9104] ses: >> msg_udp_preq
07/04 02:22:58.555 [9104] dbg: len 4, dst 64.94.18.73:30002, ttl 64, spi 1c1e61c3, rc 4, err 0
07/04 02:22:59.164 [9104] ses: >> msg_udp_preq
07/04 02:22:59.179 [9104] dbg: len 72, dst 97.32.1.191:5052, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:23:00.695 [9104] ses: >> msg_udp_preq
07/04 02:23:00.695 [9104] dbg: len 72, dst 97.32.1.191:5052, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:23:02.170 [9104] ses: >> msg_udp_preq
07/04 02:23:02.170 [9104] dbg: len 4, dst 64.94.18.73:30003, ttl 64, spi 71f42010, rc 4, err 0
07/04 02:23:02.499 [9104] ses: >> msg_udp_preq
07/04 02:23:02.499 [9104] dbg: len 72, dst 97.32.1.191:5052, ttl 2, spi d64041b5, rc 72, err 0
07/04 02:23:02.530 [9104] dbg: len 4, dst 64.94.18.73:30004, ttl 64, spi 2a48d4ea, rc 4, err 0
07/04 02:23:05.782 [9104] ses: >> msg_udp_preq
07/04 02:23:05.797 [9104] dbg: len 4, dst 64.94.18.73:30005, ttl 64, spi 3634a000, rc 4, err 0
07/04 02:23:06.047 [9104] ses: >> msg_udp_preq

New Contributor

Re: Hijacked account?

07/04 02:23:06.047 [9104] dbg: len 72, dst 97.32.1.191:5052, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:23:06.094 [9104] dbg: len 4, dst 64.94.18.73:30006, ttl 64, spi 01b06270, rc 4, err 0
07/04 02:23:09.357 [9104] ses: >> msg_tcp_open, sk 4157514795.0, listener 0
07/04 02:23:09.623 [9104] ses: >> msg_tcp_connect, sk 4157514795.1260, dst 192.168.137.121:50120, raw 1
07/04 02:23:14.614 [9104] ses: >> msg_tcp_close, sk 4157514795.1260
07/04 02:23:14.692 [9104] ses: >> msg_tcp_open, sk 4157515847.0, listener 0
07/04 02:23:15.286 [9104] ses: >> msg_tcp_connect, sk 4157515847.1112, dst 192.168.137.121:50123, raw 1
07/04 02:23:20.249 [9104] ses: >> msg_tcp_close, sk 4157515847.1112
07/04 02:23:20.249 [9104] ses: >> msg_tcp_open, sk 4157516736.0, listener 1
07/04 02:23:25.767 [9104] ses: >> msg_tcp_close, sk 4157516736.920
07/04 02:23:25.767 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 02:31:45.907 [9104] ses: >> msg_udp_preq
07/04 02:31:45.907 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:31:47.407 [9104] ses: >> msg_udp_preq
07/04 02:31:47.407 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:31:51.876 [9104] ses: >> msg_udp_preq
07/04 02:31:51.876 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:31:51.923 [9104] dbg: len 4, dst 64.94.18.73:30000, ttl 64, spi 15eb2b79, rc 4, err 0
07/04 02:31:55.613 [9104] ses: >> msg_udp_preq
07/04 02:31:55.613 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:31:57.066 [9104] ses: >> msg_udp_preq
07/04 02:31:57.066 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:31:58.579 [9104] ses: >> msg_udp_preq
07/04 02:31:58.579 [9104] dbg: len 4, dst 64.94.18.73:30001, ttl 64, spi 11a6a062, rc 4, err 0
07/04 02:31:59.236 [9104] ses: >> msg_udp_preq
07/04 02:31:59.251 [9104] dbg: len 72, dst 97.32.1.191:5053, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:32:00.736 [9104] ses: >> msg_udp_preq
07/04 02:32:00.736 [9104] dbg: len 72, dst 97.32.1.191:5053, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:32:02.195 [9104] ses: >> msg_udp_preq
07/04 02:32:02.195 [9104] dbg: len 4, dst 64.94.18.73:30002, ttl 64, spi 2aa830dd, rc 4, err 0
07/04 02:32:02.820 [9104] ses: >> msg_udp_preq
07/04 02:32:02.835 [9104] dbg: len 72, dst 97.32.1.191:5053, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:32:04.328 [9104] ses: >> msg_udp_preq
07/04 02:32:04.328 [9104] dbg: len 72, dst 97.32.1.191:5053, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:32:05.828 [9104] ses: >> msg_udp_preq
07/04 02:32:05.828 [9104] dbg: len 4, dst 64.94.18.73:30003, ttl 64, spi 51bc0b12, rc 4, err 0
07/04 02:32:06.172 [9104] ses: >> msg_udp_preq
07/04 02:32:06.172 [9104] dbg: len 72, dst 97.32.1.191:5053, ttl 2, spi d64041b5, rc 72, err 0
07/04 02:32:06.219 [9104] dbg: len 4, dst 64.94.18.73:30004, ttl 64, spi 067f40e2, rc 4, err 0
07/04 02:32:09.481 [9104] ses: >> msg_udp_preq
07/04 02:32:09.481 [9104] dbg: len 4, dst 64.94.18.73:30005, ttl 64, spi 525d1487, rc 4, err 0
07/04 02:32:09.746 [9104] ses: >> msg_udp_preq
07/04 02:32:09.746 [9104] dbg: len 72, dst 97.32.1.191:5053, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:32:09.778 [9104] dbg: len 4, dst 64.94.18.73:30006, ttl 64, spi 0fcd5bbf, rc 4, err 0
07/04 02:32:13.012 [9104] ses: >> msg_tcp_open, sk 4157625935.0, listener 0
07/04 02:32:13.278 [9104] ses: >> msg_tcp_connect, sk 4157625935.1292, dst 192.168.137.121:50136, raw 1
07/04 02:32:18.278 [9104] ses: >> msg_tcp_close, sk 4157625935.1292
07/04 02:32:18.278 [9104] ses: >> msg_tcp_open, sk 4157627107.0, listener 0
07/04 02:32:18.785 [9104] ses: >> msg_tcp_connect, sk 4157627107.1292, dst 192.168.137.121:50137, raw 1
07/04 02:32:23.795 [9104] ses: >> msg_tcp_close, sk 4157627107.1292
07/04 02:32:23.795 [9104] ses: >> msg_tcp_open, sk 4157628494.0, listener 1
07/04 02:32:29.370 [9104] ses: >> msg_tcp_close, sk 4157628494.1292
07/04 02:32:29.370 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 02:40:54.147 [9104] ses: >> msg_udp_preq
07/04 02:40:54.147 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:40:55.647 [9104] ses: >> msg_udp_preq
07/04 02:40:55.647 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:41:00.144 [9104] ses: >> msg_udp_preq
07/04 02:41:00.160 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:41:00.191 [9104] dbg: len 4, dst 64.94.18.73:30000, ttl 64, spi 18a853fa, rc 4, err 0
07/04 02:41:03.781 [9104] ses: >> msg_udp_preq
07/04 02:41:03.781 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:41:05.214 [9104] ses: >> msg_udp_preq
07/04 02:41:05.214 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:41:06.728 [9104] ses: >> msg_udp_preq
07/04 02:41:06.728 [9104] dbg: len 4, dst 64.94.18.73:30001, ttl 64, spi 4e5b10c1, rc 4, err 0
07/04 02:41:07.255 [9104] ses: >> msg_udp_preq
07/04 02:41:07.255 [9104] dbg: len 72, dst 97.32.1.191:5044, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:41:08.755 [9104] ses: >> msg_udp_preq
07/04 02:41:08.755 [9104] dbg: len 72, dst 97.32.1.191:5044, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:41:10.259 [9104] ses: >> msg_udp_preq
07/04 02:41:10.259 [9104] dbg: len 4, dst 64.94.18.73:30002, ttl 64, spi 5efa93c4, rc 4, err 0
07/04 02:41:14.259 [9104] ses: >> msg_udp_preq
07/04 02:41:14.259 [9104] dbg: len 4, dst 64.94.18.73:30003, ttl 64, spi 45b0ba85, rc 4, err 0
07/04 02:41:14.525 [9104] ses: >> msg_udp_preq
07/04 02:41:14.525 [9104] dbg: len 72, dst 97.32.1.191:5044, ttl 2, spi d64041b5, rc 72, err 0
07/04 02:41:14.556 [9104] dbg: len 4, dst 64.94.18.73:30004, ttl 64, spi 185d1ce5, rc 4, err 0
07/04 02:41:17.791 [9104] ses: >> msg_udp_preq
07/04 02:41:17.791 [9104] dbg: len 4, dst 64.94.18.73:30005, ttl 64, spi 74d256dc, rc 4, err 0
07/04 02:41:18.072 [9104] ses: >> msg_udp_preq
07/04 02:41:18.087 [9104] dbg: len 72, dst 97.32.1.191:5044, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:41:18.118 [9104] dbg: len 4, dst 64.94.18.73:30006, ttl 64, spi 523cd81c, rc 4, err 0
07/04 02:41:21.454 [9104] ses: >> msg_tcp_open, sk 4157732037.0, listener 0
07/04 02:41:21.719 [9104] ses: >> msg_tcp_connect, sk 4157732037.1332, dst 192.168.137.121:50181, raw 1
07/04 02:41:26.724 [9104] ses: >> msg_tcp_close, sk 4157732037.1332
07/04 02:41:26.724 [9104] ses: >> msg_tcp_open, sk 4157733019.0, listener 0
07/04 02:41:27.240 [9104] ses: >> msg_tcp_connect, sk 4157733019.1332, dst 192.168.137.121:50182, raw 1
07/04 02:41:32.244 [9104] ses: >> msg_tcp_close, sk 4157733019.1332
07/04 02:41:32.244 [9104] ses: >> msg_tcp_open, sk 4157734216.0, listener 1
07/04 02:41:37.765 [9104] ses: >> msg_tcp_close, sk 4157734216.1304
07/04 02:41:37.765 [9104] ses: >> msg_h2_peer, [227-701-426], rc 33
07/04 02:50:12.839 [9104] ses: >> msg_udp_preq
07/04 02:50:12.839 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:14.340 [9104] ses: >> msg_udp_preq
07/04 02:50:14.340 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:18.849 [9104] ses: >> msg_udp_preq
07/04 02:50:18.849 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:18.880 [9104] dbg: len 4, dst 64.94.18.73:30000, ttl 64, spi 5be69c17, rc 4, err 0
07/04 02:50:22.423 [9104] ses: >> msg_udp_preq
07/04 02:50:22.423 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:23.909 [9104] ses: >> msg_udp_preq
07/04 02:50:23.909 [9104] dbg: len 72, dst 192.168.137.121:59929, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:25.425 [9104] ses: >> msg_udp_preq
07/04 02:50:25.425 [9104] dbg: len 4, dst 64.94.18.73:30001, ttl 64, spi 42bf9e73, rc 4, err 0
07/04 02:50:26.066 [9104] ses: >> msg_udp_preq
07/04 02:50:26.081 [9104] dbg: len 72, dst 97.32.1.191:5055, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:27.580 [9104] ses: >> msg_udp_preq
07/04 02:50:27.580 [9104] dbg: len 72, dst 97.32.1.191:5055, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:29.121 [9104] ses: >> msg_udp_preq
07/04 02:50:29.121 [9104] dbg: len 4, dst 64.94.18.73:30002, ttl 64, spi 3b69a88c, rc 4, err 0
07/04 02:50:29.699 [9104] ses: >> msg_udp_preq
07/04 02:50:29.699 [9104] dbg: len 72, dst 97.32.1.191:5055, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:31.199 [9104] ses: >> msg_udp_preq
07/04 02:50:31.199 [9104] dbg: len 72, dst 97.32.1.191:5055, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:32.699 [9104] ses: >> msg_udp_preq
07/04 02:50:32.699 [9104] dbg: len 4, dst 64.94.18.73:30003, ttl 64, spi 52b995da, rc 4, err 0
07/04 02:50:33.058 [9104] ses: >> msg_udp_preq
07/04 02:50:33.058 [9104] dbg: len 72, dst 97.32.1.191:5055, ttl 2, spi d64041b5, rc 72, err 0
07/04 02:50:33.090 [9104] dbg: len 4, dst 64.94.18.73:30004, ttl 64, spi 281be9ec, rc 4, err 0
07/04 02:50:36.345 [9104] ses: >> msg_udp_preq
07/04 02:50:36.345 [9104] dbg: len 4, dst 64.94.18.73:30005, ttl 64, spi 4e8a1e12, rc 4, err 0
07/04 02:50:36.689 [9104] ses: >> msg_udp_preq
07/04 02:50:36.689 [9104] dbg: len 72, dst 97.32.1.191:5055, ttl 64, spi d64041b5, rc 72, err 0
07/04 02:50:36.720 [9104] dbg: len 4, dst 64.94.18.73:30006, ttl 64, spi 56462622, rc 4, err 0
07/04 02:50:39.954 [9104] ses: >> msg_tcp_open, sk 4157836299.0, listener 0
07/04 02:50:40.219 [9104] ses: >> msg_tcp_connect, sk 4157836299.1272, dst 192.168.137.121:50209, raw 1
07/04 02:50:45.235 [9104] ses: >> msg_tcp_close, sk 4157836299.1272
07/04 02:50:45.313 [9104] ses: >> msg_tcp_open, sk 4157837583.0, listener 0
07/04 02:50:45.735 [9104] ses: >> msg_tcp_connect, sk 4157837583.1280, dst 192.168.137.121:50210, raw 1
07/04 02:50:50.738 [9104] ses: >> msg_tcp_close, sk 4157837583.1280
07/04 02:50:50.738 [9104] ses: >> msg_tcp_open, sk 4157838940.0, listener 1
07/04 02:50:56.230 [9104] ses: >> msg_tcp_close, sk 4157838940.1280