nonamenumber0 0 Posted ... (edited) Hello, Eddie is stuck in a connection loop after multiple restarts. I tried different protocols and still can't connect. I disables the TAP and enabled it again and it didn't have any effect. Can you help me get connected? I 2024.05.11 23:39:12 - Checking authorization ... . 2024.05.11 23:39:13 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:39:13 - Connecting to Alpheratz (Netherlands, Alblasserdam) . 2024.05.11 23:39:13 - Elevated: Command:route . 2024.05.11 23:39:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.245/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:14 - Routes, add 134.19.179.245/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:39:14 - Elevated: Command:route-list . 2024.05.11 23:39:14 - Routes, add 134.19.179.245/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:39:14 - Elevated: Command:wfp . 2024.05.11 23:39:14 - Elevated: Command:wfp . 2024.05.11 23:39:14 - Elevated: Command:wfp . 2024.05.11 23:39:14 - Above log line repeated 3 times more . 2024.05.11 23:39:14 - Elevated: Command:openvpn . 2024.05.11 23:39:14 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:39:14 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:39:14 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:39:14 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:39:14 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:39:14 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:39:14 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:39:14 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]134.19.179.245:443 . 2024.05.11 23:39:14 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:39:14 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:39:14 - OpenVPN > UDP link remote: [AF_INET]134.19.179.245:443 . 2024.05.11 23:39:14 - OpenVPN > TLS: Initial packet from [AF_INET]134.19.179.245:443, sid=0e439682 394e55f9 . 2024.05.11 23:39:14 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:39:14 - OpenVPN > VERIFY KU OK . 2024.05.11 23:39:14 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:39:14 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:39:14 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:39:14 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Alpheratz, emailAddress=info@airvpn.org . 2024.05.11 23:39:14 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:39:14 - OpenVPN > [Alpheratz] Peer Connection Initiated with [AF_INET]134.19.179.245:443 . 2024.05.11 23:39:14 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.32.202.1,dhcp-option DNS6 fde6:7a:7d20:1cca::1,tun-ipv6,route-gateway 10.32.202.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:1cca::10f0/64 fde6:7a:7d20:1cca::1,ifconfig 10.32.202.242 255.255.255.0,peer-id 2,cipher AES-256-GCM' . 2024.05.11 23:39:14 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:39:14 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.32.202.1' . 2024.05.11 23:39:14 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:1cca::1' . 2024.05.11 23:39:14 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:39:14 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:39:14 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:39:14 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:39:14 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:39:14 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:39:14 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:39:14 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:39:14 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:39:14 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:39:14 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:39:14 - OpenVPN > open_tun . 2024.05.11 23:39:14 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:39:15 - Elevated: Command:wfp . 2024.05.11 23:39:15 - Elevated: Command:wfp . 2024.05.11 23:39:15 - Elevated: Command:wfp . 2024.05.11 23:39:15 - Above log line repeated 3 times more . 2024.05.11 23:39:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.32.202.242 255.255.255.0 . 2024.05.11 23:39:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:39:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:39:15 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:39:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:1cca::10f0/128 store=active . 2024.05.11 23:39:15 - OpenVPN > add_route_ipv6(fde6:7a:7d20:1cca::/64 -> fde6:7a:7d20:1cca::10f0 metric 0) dev Local Area Connection . 2024.05.11 23:39:15 - Exec(18) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:39:15 - Exec(18) done in 78 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:39:15 - Interface List . 2024.05.11 23:39:15 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:39:15 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:39:15 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:39:15 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:39:15 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:39:15 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:39:15 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:39:15 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:39:15 - =========================================================================== . 2024.05.11 23:39:15 - IPv6 Route Table . 2024.05.11 23:39:15 - =========================================================================== . 2024.05.11 23:39:15 - Active Routes: . 2024.05.11 23:39:15 - If Metric Network Destination Gateway . 2024.05.11 23:39:15 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:39:15 - 1 331 ::1/128 On-link . 2024.05.11 23:39:15 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:39:15 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:39:15 - On-link . 2024.05.11 23:39:15 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:39:15 - On-link . 2024.05.11 23:39:15 - 20 261 fde6:7a:7d20:1cca::/64 fe80::8 . 2024.05.11 23:39:15 - 20 261 fe80::/64 On-link . 2024.05.11 23:39:15 - 18 291 fe80::/64 On-link . 2024.05.11 23:39:15 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:39:15 - On-link . 2024.05.11 23:39:15 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:39:15 - On-link . 2024.05.11 23:39:15 - 1 331 ff00::/8 On-link . 2024.05.11 23:39:15 - 20 261 ff00::/8 On-link . 2024.05.11 23:39:15 - 18 291 ff00::/8 On-link . 2024.05.11 23:39:15 - =========================================================================== . 2024.05.11 23:39:15 - Persistent Routes: . 2024.05.11 23:39:15 - None' . 2024.05.11 23:39:15 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:1cca::/64 20 fe80::8 store=active . 2024.05.11 23:39:15 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:39:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:39:15 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:39:15 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:39:16 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:39:16 - Elevated: Command:set-interface-metric . 2024.05.11 23:39:16 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:39:16 - Elevated: Command:set-interface-metric . 2024.05.11 23:39:16 - Elevated: Command:wfp . 2024.05.11 23:39:16 - Elevated: Command:wfp . 2024.05.11 23:39:16 - Elevated: Command:wfp . 2024.05.11 23:39:16 - Above log line repeated 3 times more . 2024.05.11 23:39:16 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:39:16 - Elevated: Command:route-list . 2024.05.11 23:39:16 - Elevated: Command:windows-dns . 2024.05.11 23:39:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.32.202.1 register=primary validate=no', exit:0 . 2024.05.11 23:39:16 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.32.202.1) . 2024.05.11 23:39:16 - Elevated: Command:windows-dns . 2024.05.11 23:39:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:1cca::1 register=primary validate=no', exit:0 . 2024.05.11 23:39:16 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:1cca::1) . 2024.05.11 23:39:16 - Elevated: Command:windows-dns . 2024.05.11 23:39:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.32.202.1 register=primary validate=no', exit:0 . 2024.05.11 23:39:16 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.32.202.1) . 2024.05.11 23:39:16 - Elevated: Command:windows-dns . 2024.05.11 23:39:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:1cca::1 register=primary validate=no', exit:0 . 2024.05.11 23:39:17 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:1cca::1) . 2024.05.11 23:39:17 - Elevated: Command:route-list . 2024.05.11 23:39:17 - Elevated: Command:route . 2024.05.11 23:39:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:17 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:18 - Elevated: Command:route-list . 2024.05.11 23:39:18 - Elevated: Command:route . 2024.05.11 23:39:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:18 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:18 - Elevated: Command:route-list . 2024.05.11 23:39:19 - Elevated: Command:route . 2024.05.11 23:39:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:19 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:19 - Elevated: Command:route-list . 2024.05.11 23:39:19 - Elevated: Command:route . 2024.05.11 23:39:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:19 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:20 - Elevated: Command:route-list . 2024.05.11 23:39:20 - Elevated: Command:route . 2024.05.11 23:39:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.243/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:20 - Routes, add 134.19.179.243/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:21 - Elevated: Command:route-list . 2024.05.11 23:39:21 - Elevated: Command:route . 2024.05.11 23:39:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:1212:990e:c823:fcac:44b9/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:21 - Routes, add 2a00:1678:2470:1212:990e:c823:fcac:44b9/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:21 - Flushing DNS . 2024.05.11 23:39:21 - Elevated: Command:dns-flush . 2024.05.11 23:39:21 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:39:21 - NET . 2024.05.11 23:39:21 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:39:21 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:39:21 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:39:21 - Exec(19) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:39:21 - Exec(19) done in 62 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:39:21 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:39:21 - Checking route IPv4 . 2024.05.11 23:39:28 - Checking route (4° try) . 2024.05.11 23:39:32 - Checking route (5° try) E 2024.05.11 23:39:32 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:39:32 - Disconnecting . 2024.05.11 23:39:32 - Sending soft termination signal . 2024.05.11 23:39:32 - Elevated: Command:openvpn . 2024.05.11 23:39:35 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:39:38 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:39:38 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:1cca::/64) . 2024.05.11 23:39:38 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:1cca::/64 20 fe80::8 store=active . 2024.05.11 23:39:38 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:1cca::10f0 store=active . 2024.05.11 23:39:38 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.32.202.242 store=active . 2024.05.11 23:39:38 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:39:39 - Elevated: Command:route-list . 2024.05.11 23:39:39 - Elevated: Command:route . 2024.05.11 23:39:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:39 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:39 - Elevated: Command:route-list . 2024.05.11 23:39:40 - Elevated: Command:route . 2024.05.11 23:39:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:40 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:40 - Elevated: Command:route-list . 2024.05.11 23:39:40 - Elevated: Command:route . 2024.05.11 23:39:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:40 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:41 - Elevated: Command:route-list . 2024.05.11 23:39:41 - Elevated: Command:route . 2024.05.11 23:39:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:41 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:41 - Elevated: Command:route-list . 2024.05.11 23:39:42 - Elevated: Command:route . 2024.05.11 23:39:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.245/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:42 - Routes, delete 134.19.179.245/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:39:42 - Elevated: Command:route-list . 2024.05.11 23:39:42 - Elevated: Command:route . 2024.05.11 23:39:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.243/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:43 - Routes, delete 134.19.179.243/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:43 - Elevated: Command:route-list . 2024.05.11 23:39:43 - Elevated: Command:route . 2024.05.11 23:39:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:1212:990e:c823:fcac:44b9/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:43 - Routes, delete 2a00:1678:2470:1212:990e:c823:fcac:44b9/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:43 - Elevated: Command:route-list . 2024.05.11 23:39:43 - Routes, delete 134.19.179.245/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:39:43 - Elevated: Command:windows-dns . 2024.05.11 23:39:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:39:44 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:39:44 - Elevated: Command:windows-dns . 2024.05.11 23:39:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:39:44 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:39:44 - Elevated: Command:windows-dns . 2024.05.11 23:39:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:39:44 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:39:44 - Elevated: Command:windows-dns . 2024.05.11 23:39:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:39:44 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:39:44 - Elevated: Command:wfp . 2024.05.11 23:39:44 - Elevated: Command:wfp . 2024.05.11 23:39:44 - Elevated: Command:wfp . 2024.05.11 23:39:44 - Above log line repeated 3 times more . 2024.05.11 23:39:44 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:39:44 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:39:44 - Elevated: Command:set-interface-metric . 2024.05.11 23:39:44 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:39:44 - Elevated: Command:set-interface-metric . 2024.05.11 23:39:44 - Elevated: Command:wfp . 2024.05.11 23:39:44 - Elevated: Command:wfp . 2024.05.11 23:39:44 - Elevated: Command:wfp . 2024.05.11 23:39:44 - Above log line repeated 9 times more . 2024.05.11 23:39:44 - Connection terminated. I 2024.05.11 23:39:48 - Checking authorization ... . 2024.05.11 23:39:48 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:39:48 - Connecting to Atik (Netherlands, Alblasserdam) . 2024.05.11 23:39:49 - Elevated: Command:route-list . 2024.05.11 23:39:49 - Elevated: Command:route . 2024.05.11 23:39:49 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.12/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:49 - Routes, add 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:39:49 - Elevated: Command:route-list . 2024.05.11 23:39:49 - Routes, add 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:39:49 - Elevated: Command:wfp . 2024.05.11 23:39:49 - Elevated: Command:wfp . 2024.05.11 23:39:49 - Elevated: Command:wfp . 2024.05.11 23:39:49 - Above log line repeated 3 times more . 2024.05.11 23:39:49 - Elevated: Command:openvpn . 2024.05.11 23:39:50 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:39:50 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:39:50 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:39:50 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:39:50 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:39:50 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:39:50 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:39:50 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.12:443 . 2024.05.11 23:39:50 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:39:50 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:39:50 - OpenVPN > UDP link remote: [AF_INET]213.152.161.12:443 . 2024.05.11 23:39:50 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.12:443, sid=c554273c f2be8e3d . 2024.05.11 23:39:50 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:39:50 - OpenVPN > VERIFY KU OK . 2024.05.11 23:39:50 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:39:50 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:39:50 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:39:50 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Atik, emailAddress=info@airvpn.org . 2024.05.11 23:39:50 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:39:50 - OpenVPN > [Atik] Peer Connection Initiated with [AF_INET]213.152.161.12:443 . 2024.05.11 23:39:50 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.10.106.1,dhcp-option DNS6 fde6:7a:7d20:66a::1,tun-ipv6,route-gateway 10.10.106.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:66a::10a3/64 fde6:7a:7d20:66a::1,ifconfig 10.10.106.165 255.255.255.0,peer-id 5,cipher AES-256-GCM' . 2024.05.11 23:39:50 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:39:50 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.10.106.1' . 2024.05.11 23:39:50 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:66a::1' . 2024.05.11 23:39:50 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:39:50 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:39:50 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:39:50 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:39:50 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:39:50 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:39:50 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:39:50 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:39:50 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:39:50 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:39:50 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:39:50 - OpenVPN > open_tun . 2024.05.11 23:39:50 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:39:50 - Elevated: Command:wfp . 2024.05.11 23:39:50 - Elevated: Command:wfp . 2024.05.11 23:39:50 - Elevated: Command:wfp . 2024.05.11 23:39:50 - Above log line repeated 3 times more . 2024.05.11 23:39:50 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.10.106.165 255.255.255.0 . 2024.05.11 23:39:50 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:39:50 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:39:50 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:39:50 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:66a::10a3/128 store=active . 2024.05.11 23:39:51 - OpenVPN > add_route_ipv6(fde6:7a:7d20:66a::/64 -> fde6:7a:7d20:66a::10a3 metric 0) dev Local Area Connection . 2024.05.11 23:39:51 - Exec(20) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:39:51 - Exec(20) done in 94 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:39:51 - Interface List . 2024.05.11 23:39:51 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:39:51 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:39:51 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:39:51 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:39:51 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:39:51 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:39:51 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:39:51 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:39:51 - =========================================================================== . 2024.05.11 23:39:51 - IPv6 Route Table . 2024.05.11 23:39:51 - =========================================================================== . 2024.05.11 23:39:51 - Active Routes: . 2024.05.11 23:39:51 - If Metric Network Destination Gateway . 2024.05.11 23:39:51 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:39:51 - 1 331 ::1/128 On-link . 2024.05.11 23:39:51 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:39:51 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:39:51 - On-link . 2024.05.11 23:39:51 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:39:51 - On-link . 2024.05.11 23:39:51 - 20 261 fde6:7a:7d20:66a::/64 fe80::8 . 2024.05.11 23:39:51 - 20 261 fe80::/64 On-link . 2024.05.11 23:39:51 - 18 291 fe80::/64 On-link . 2024.05.11 23:39:51 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:39:51 - On-link . 2024.05.11 23:39:51 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:39:51 - On-link . 2024.05.11 23:39:51 - 1 331 ff00::/8 On-link . 2024.05.11 23:39:51 - 20 261 ff00::/8 On-link . 2024.05.11 23:39:51 - 18 291 ff00::/8 On-link . 2024.05.11 23:39:51 - =========================================================================== . 2024.05.11 23:39:51 - Persistent Routes: . 2024.05.11 23:39:51 - None' . 2024.05.11 23:39:51 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:66a::/64 20 fe80::8 store=active . 2024.05.11 23:39:51 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:39:51 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:39:51 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:39:51 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:39:51 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:39:51 - Elevated: Command:set-interface-metric . 2024.05.11 23:39:51 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:39:51 - Elevated: Command:set-interface-metric . 2024.05.11 23:39:51 - Elevated: Command:wfp . 2024.05.11 23:39:51 - Elevated: Command:wfp . 2024.05.11 23:39:51 - Elevated: Command:wfp . 2024.05.11 23:39:51 - Above log line repeated 3 times more . 2024.05.11 23:39:51 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:39:52 - Elevated: Command:route-list . 2024.05.11 23:39:52 - Elevated: Command:windows-dns . 2024.05.11 23:39:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.10.106.1 register=primary validate=no', exit:0 . 2024.05.11 23:39:52 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.10.106.1) . 2024.05.11 23:39:52 - Elevated: Command:windows-dns . 2024.05.11 23:39:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:66a::1 register=primary validate=no', exit:0 . 2024.05.11 23:39:52 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:66a::1) . 2024.05.11 23:39:52 - Elevated: Command:windows-dns . 2024.05.11 23:39:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.10.106.1 register=primary validate=no', exit:0 . 2024.05.11 23:39:52 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.10.106.1) . 2024.05.11 23:39:52 - Elevated: Command:windows-dns . 2024.05.11 23:39:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:66a::1 register=primary validate=no', exit:0 . 2024.05.11 23:39:52 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:66a::1) . 2024.05.11 23:39:53 - Elevated: Command:route-list . 2024.05.11 23:39:53 - Elevated: Command:route . 2024.05.11 23:39:53 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:53 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:54 - Elevated: Command:route-list . 2024.05.11 23:39:54 - Elevated: Command:route . 2024.05.11 23:39:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:54 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:54 - Elevated: Command:route-list . 2024.05.11 23:39:54 - Elevated: Command:route . 2024.05.11 23:39:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:55 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:55 - Elevated: Command:route-list . 2024.05.11 23:39:55 - Elevated: Command:route . 2024.05.11 23:39:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:55 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:56 - Elevated: Command:route-list . 2024.05.11 23:39:56 - Elevated: Command:route . 2024.05.11 23:39:56 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.10/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:56 - Routes, add 213.152.161.10/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:57 - Elevated: Command:route-list . 2024.05.11 23:39:57 - Elevated: Command:route . 2024.05.11 23:39:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:39:57 - Routes, add 2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:39:57 - Flushing DNS . 2024.05.11 23:39:57 - Elevated: Command:dns-flush . 2024.05.11 23:39:57 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:39:57 - NET . 2024.05.11 23:39:57 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:39:57 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:39:57 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:39:57 - Exec(21) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:39:58 - Exec(21) done in 63 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:39:58 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:39:58 - Checking route IPv4 . 2024.05.11 23:40:04 - Checking route (4° try) . 2024.05.11 23:40:08 - Checking route (5° try) E 2024.05.11 23:40:09 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:40:09 - Disconnecting . 2024.05.11 23:40:09 - Sending soft termination signal . 2024.05.11 23:40:09 - Elevated: Command:openvpn . 2024.05.11 23:40:12 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:40:13 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:40:13 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:66a::/64) . 2024.05.11 23:40:13 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:66a::/64 20 fe80::8 store=active . 2024.05.11 23:40:13 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:66a::10a3 store=active . 2024.05.11 23:40:13 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.10.106.165 store=active . 2024.05.11 23:40:14 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:40:14 - Elevated: Command:route-list . 2024.05.11 23:40:14 - Elevated: Command:route . 2024.05.11 23:40:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:14 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:15 - Elevated: Command:route-list . 2024.05.11 23:40:15 - Elevated: Command:route . 2024.05.11 23:40:15 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:15 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:15 - Elevated: Command:route-list . 2024.05.11 23:40:16 - Elevated: Command:route . 2024.05.11 23:40:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:16 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:16 - Elevated: Command:route-list . 2024.05.11 23:40:16 - Elevated: Command:route . 2024.05.11 23:40:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:16 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:17 - Elevated: Command:route-list . 2024.05.11 23:40:17 - Elevated: Command:route . 2024.05.11 23:40:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.12/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:17 - Routes, delete 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:40:18 - Elevated: Command:route-list . 2024.05.11 23:40:18 - Elevated: Command:route . 2024.05.11 23:40:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.10/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:18 - Routes, delete 213.152.161.10/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:18 - Elevated: Command:route-list . 2024.05.11 23:40:18 - Elevated: Command:route . 2024.05.11 23:40:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:19 - Routes, delete 2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:19 - Elevated: Command:route-list . 2024.05.11 23:40:19 - Routes, delete 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:40:19 - Elevated: Command:windows-dns . 2024.05.11 23:40:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:19 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:40:19 - Elevated: Command:windows-dns . 2024.05.11 23:40:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:19 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:40:19 - Elevated: Command:windows-dns . 2024.05.11 23:40:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:19 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:40:19 - Elevated: Command:windows-dns . 2024.05.11 23:40:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:20 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:40:20 - Elevated: Command:wfp . 2024.05.11 23:40:20 - Elevated: Command:wfp . 2024.05.11 23:40:20 - Elevated: Command:wfp . 2024.05.11 23:40:20 - Above log line repeated 3 times more . 2024.05.11 23:40:20 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:40:20 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:40:20 - Elevated: Command:set-interface-metric . 2024.05.11 23:40:20 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:40:20 - Elevated: Command:set-interface-metric . 2024.05.11 23:40:20 - Elevated: Command:wfp . 2024.05.11 23:40:20 - Elevated: Command:wfp . 2024.05.11 23:40:20 - Elevated: Command:wfp . 2024.05.11 23:40:20 - Above log line repeated 9 times more . 2024.05.11 23:40:20 - Connection terminated. I 2024.05.11 23:40:23 - Checking authorization ... . 2024.05.11 23:40:24 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:40:24 - Connecting to Tianyi (Netherlands, Alblasserdam) . 2024.05.11 23:40:24 - Elevated: Command:route-list . 2024.05.11 23:40:24 - Elevated: Command:route . 2024.05.11 23:40:24 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.186.175/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:24 - Routes, add 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:40:25 - Elevated: Command:route-list . 2024.05.11 23:40:25 - Routes, add 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:40:25 - Elevated: Command:wfp . 2024.05.11 23:40:25 - Elevated: Command:wfp . 2024.05.11 23:40:25 - Elevated: Command:wfp . 2024.05.11 23:40:25 - Above log line repeated 3 times more . 2024.05.11 23:40:25 - Elevated: Command:openvpn . 2024.05.11 23:40:25 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:40:25 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:40:25 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:40:25 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:40:25 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:40:25 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:40:25 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:40:25 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.186.175:443 . 2024.05.11 23:40:25 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:40:25 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:40:25 - OpenVPN > UDP link remote: [AF_INET]213.152.186.175:443 . 2024.05.11 23:40:25 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.186.175:443, sid=229a7e10 d3ed8238 . 2024.05.11 23:40:25 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:40:25 - OpenVPN > VERIFY KU OK . 2024.05.11 23:40:25 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:40:25 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:40:25 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:40:25 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Tianyi, emailAddress=info@airvpn.org . 2024.05.11 23:40:25 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:40:25 - OpenVPN > [Tianyi] Peer Connection Initiated with [AF_INET]213.152.186.175:443 . 2024.05.11 23:40:25 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.7.10.1,dhcp-option DNS6 fde6:7a:7d20:30a::1,tun-ipv6,route-gateway 10.7.10.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:30a::1058/64 fde6:7a:7d20:30a::1,ifconfig 10.7.10.90 255.255.255.0,peer-id 1,cipher AES-256-GCM' . 2024.05.11 23:40:25 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:40:25 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.7.10.1' . 2024.05.11 23:40:25 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:30a::1' . 2024.05.11 23:40:25 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:40:25 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:40:25 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:40:25 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:40:25 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:40:25 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:40:25 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:40:25 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:40:25 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:40:25 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:40:25 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:40:25 - OpenVPN > open_tun . 2024.05.11 23:40:25 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:40:26 - Elevated: Command:wfp . 2024.05.11 23:40:26 - Elevated: Command:wfp . 2024.05.11 23:40:26 - Elevated: Command:wfp . 2024.05.11 23:40:26 - Above log line repeated 3 times more . 2024.05.11 23:40:26 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.7.10.90 255.255.255.0 . 2024.05.11 23:40:26 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:40:26 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:40:26 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:40:26 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:30a::1058/128 store=active . 2024.05.11 23:40:26 - OpenVPN > add_route_ipv6(fde6:7a:7d20:30a::/64 -> fde6:7a:7d20:30a::1058 metric 0) dev Local Area Connection . 2024.05.11 23:40:26 - Exec(22) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:40:26 - Exec(22) done in 141 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:40:26 - Interface List . 2024.05.11 23:40:26 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:40:26 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:40:26 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:40:26 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:40:26 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:40:26 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:40:26 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:40:26 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:40:26 - =========================================================================== . 2024.05.11 23:40:26 - IPv6 Route Table . 2024.05.11 23:40:26 - =========================================================================== . 2024.05.11 23:40:26 - Active Routes: . 2024.05.11 23:40:26 - If Metric Network Destination Gateway . 2024.05.11 23:40:26 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:40:26 - 1 331 ::1/128 On-link . 2024.05.11 23:40:26 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:40:26 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:40:26 - On-link . 2024.05.11 23:40:26 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:40:26 - On-link . 2024.05.11 23:40:26 - 20 261 fe80::/64 On-link . 2024.05.11 23:40:26 - 18 291 fe80::/64 On-link . 2024.05.11 23:40:26 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:40:26 - On-link . 2024.05.11 23:40:26 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:40:26 - On-link . 2024.05.11 23:40:26 - 1 331 ff00::/8 On-link . 2024.05.11 23:40:26 - 20 261 ff00::/8 On-link . 2024.05.11 23:40:26 - 18 291 ff00::/8 On-link . 2024.05.11 23:40:26 - =========================================================================== . 2024.05.11 23:40:26 - Persistent Routes: . 2024.05.11 23:40:26 - None' . 2024.05.11 23:40:26 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:30a::/64 20 fe80::8 store=active . 2024.05.11 23:40:26 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:40:26 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:40:26 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:40:26 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:40:27 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:40:27 - Elevated: Command:set-interface-metric . 2024.05.11 23:40:27 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:40:27 - Elevated: Command:set-interface-metric . 2024.05.11 23:40:27 - Elevated: Command:wfp . 2024.05.11 23:40:27 - Elevated: Command:wfp . 2024.05.11 23:40:27 - Elevated: Command:wfp . 2024.05.11 23:40:27 - Above log line repeated 3 times more . 2024.05.11 23:40:27 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:40:27 - Elevated: Command:route-list . 2024.05.11 23:40:27 - Elevated: Command:windows-dns . 2024.05.11 23:40:27 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.7.10.1 register=primary validate=no', exit:0 . 2024.05.11 23:40:27 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.7.10.1) . 2024.05.11 23:40:27 - Elevated: Command:windows-dns . 2024.05.11 23:40:27 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:30a::1 register=primary validate=no', exit:0 . 2024.05.11 23:40:27 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:30a::1) . 2024.05.11 23:40:27 - Elevated: Command:windows-dns . 2024.05.11 23:40:28 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.7.10.1 register=primary validate=no', exit:0 . 2024.05.11 23:40:28 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.7.10.1) . 2024.05.11 23:40:28 - Elevated: Command:windows-dns . 2024.05.11 23:40:28 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:30a::1 register=primary validate=no', exit:0 . 2024.05.11 23:40:28 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:30a::1) . 2024.05.11 23:40:28 - Elevated: Command:route-list . 2024.05.11 23:40:28 - Elevated: Command:route . 2024.05.11 23:40:28 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:28 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:29 - Elevated: Command:route-list . 2024.05.11 23:40:29 - Elevated: Command:route . 2024.05.11 23:40:29 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:29 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:29 - Elevated: Command:route-list . 2024.05.11 23:40:30 - Elevated: Command:route . 2024.05.11 23:40:30 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:30 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:30 - Elevated: Command:route-list . 2024.05.11 23:40:30 - Elevated: Command:route . 2024.05.11 23:40:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:31 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:31 - Elevated: Command:route-list . 2024.05.11 23:40:31 - Elevated: Command:route . 2024.05.11 23:40:32 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.186.173/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:32 - Routes, add 213.152.186.173/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:32 - Elevated: Command:route-list . 2024.05.11 23:40:32 - Elevated: Command:route . 2024.05.11 23:40:32 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:1337:2430:5879:14eb:6d99:c756/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:32 - Routes, add 2a00:1678:1337:2430:5879:14eb:6d99:c756/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:32 - Flushing DNS . 2024.05.11 23:40:32 - Elevated: Command:dns-flush . 2024.05.11 23:40:33 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:40:33 - NET . 2024.05.11 23:40:33 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:40:33 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:40:33 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:40:33 - Exec(23) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:40:33 - Exec(23) done in 125 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:40:33 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:40:33 - Checking route IPv4 . 2024.05.11 23:40:39 - Checking route (4° try) . 2024.05.11 23:40:44 - Checking route (5° try) E 2024.05.11 23:40:44 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:40:44 - Disconnecting . 2024.05.11 23:40:44 - Sending soft termination signal . 2024.05.11 23:40:44 - Elevated: Command:openvpn . 2024.05.11 23:40:47 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:40:49 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:40:49 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:30a::/64) . 2024.05.11 23:40:49 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:30a::/64 20 fe80::8 store=active . 2024.05.11 23:40:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:30a::1058 store=active . 2024.05.11 23:40:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.7.10.90 store=active . 2024.05.11 23:40:49 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:40:50 - Elevated: Command:route-list . 2024.05.11 23:40:50 - Elevated: Command:route . 2024.05.11 23:40:50 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:50 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:50 - Elevated: Command:route-list . 2024.05.11 23:40:51 - Elevated: Command:route . 2024.05.11 23:40:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:51 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:51 - Elevated: Command:route-list . 2024.05.11 23:40:51 - Elevated: Command:route . 2024.05.11 23:40:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:52 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:52 - Elevated: Command:route-list . 2024.05.11 23:40:52 - Elevated: Command:route . 2024.05.11 23:40:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:52 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:53 - Elevated: Command:route-list . 2024.05.11 23:40:53 - Elevated: Command:route . 2024.05.11 23:40:53 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.186.175/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:53 - Routes, delete 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:40:53 - Elevated: Command:route-list . 2024.05.11 23:40:53 - Elevated: Command:route . 2024.05.11 23:40:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.186.173/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:54 - Routes, delete 213.152.186.173/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:54 - Elevated: Command:route-list . 2024.05.11 23:40:54 - Elevated: Command:route . 2024.05.11 23:40:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:1337:2430:5879:14eb:6d99:c756/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:40:54 - Routes, delete 2a00:1678:1337:2430:5879:14eb:6d99:c756/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:40:55 - Elevated: Command:route-list . 2024.05.11 23:40:55 - Routes, delete 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:40:55 - Elevated: Command:windows-dns . 2024.05.11 23:40:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:55 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:40:55 - Elevated: Command:windows-dns . 2024.05.11 23:40:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:55 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:40:55 - Elevated: Command:windows-dns . 2024.05.11 23:40:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:55 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:40:55 - Elevated: Command:windows-dns . 2024.05.11 23:40:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:40:55 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:40:55 - Elevated: Command:wfp . 2024.05.11 23:40:55 - Elevated: Command:wfp . 2024.05.11 23:40:55 - Elevated: Command:wfp . 2024.05.11 23:40:55 - Above log line repeated 3 times more . 2024.05.11 23:40:55 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:40:56 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:40:56 - Elevated: Command:set-interface-metric . 2024.05.11 23:40:56 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:40:56 - Elevated: Command:set-interface-metric . 2024.05.11 23:40:56 - Elevated: Command:wfp . 2024.05.11 23:40:56 - Elevated: Command:wfp . 2024.05.11 23:40:56 - Elevated: Command:wfp . 2024.05.11 23:40:56 - Above log line repeated 9 times more . 2024.05.11 23:40:56 - Connection terminated. I 2024.05.11 23:40:59 - Checking authorization ... . 2024.05.11 23:41:00 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:41:00 - Connecting to Garnet (Netherlands, Alblasserdam) . 2024.05.11 23:41:00 - Elevated: Command:route-list . 2024.05.11 23:41:00 - Elevated: Command:route . 2024.05.11 23:41:00 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.76/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:00 - Routes, add 213.152.162.76/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:41:01 - Elevated: Command:route-list . 2024.05.11 23:41:01 - Routes, add 213.152.162.76/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:41:01 - Elevated: Command:wfp . 2024.05.11 23:41:01 - Elevated: Command:wfp . 2024.05.11 23:41:01 - Elevated: Command:wfp . 2024.05.11 23:41:01 - Above log line repeated 3 times more . 2024.05.11 23:41:01 - Elevated: Command:openvpn . 2024.05.11 23:41:01 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:41:01 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:41:01 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:41:01 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:41:01 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:41:01 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:41:01 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:41:01 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.162.76:443 . 2024.05.11 23:41:01 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:41:01 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:41:01 - OpenVPN > UDP link remote: [AF_INET]213.152.162.76:443 . 2024.05.11 23:41:01 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.162.76:443, sid=4282c81a a16c8a7d . 2024.05.11 23:41:01 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:41:01 - OpenVPN > VERIFY KU OK . 2024.05.11 23:41:01 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:41:01 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:41:01 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:41:01 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Garnet, emailAddress=info@airvpn.org . 2024.05.11 23:41:01 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:41:01 - OpenVPN > [Garnet] Peer Connection Initiated with [AF_INET]213.152.162.76:443 . 2024.05.11 23:41:01 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.17.74.1,dhcp-option DNS6 fde6:7a:7d20:d4a::1,tun-ipv6,route-gateway 10.17.74.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:d4a::10c1/64 fde6:7a:7d20:d4a::1,ifconfig 10.17.74.195 255.255.255.0,peer-id 2,cipher AES-256-GCM' . 2024.05.11 23:41:01 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:41:01 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.17.74.1' . 2024.05.11 23:41:01 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:d4a::1' . 2024.05.11 23:41:01 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:41:01 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:41:01 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:41:01 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:41:01 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:41:01 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:41:01 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:41:01 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:41:01 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:41:01 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:41:01 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:41:01 - OpenVPN > open_tun . 2024.05.11 23:41:01 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:41:02 - Elevated: Command:wfp . 2024.05.11 23:41:02 - Elevated: Command:wfp . 2024.05.11 23:41:02 - Elevated: Command:wfp . 2024.05.11 23:41:02 - Above log line repeated 3 times more . 2024.05.11 23:41:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.17.74.195 255.255.255.0 . 2024.05.11 23:41:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:41:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:41:02 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:41:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:d4a::10c1/128 store=active . 2024.05.11 23:41:02 - OpenVPN > add_route_ipv6(fde6:7a:7d20:d4a::/64 -> fde6:7a:7d20:d4a::10c1 metric 0) dev Local Area Connection . 2024.05.11 23:41:02 - Exec(24) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:41:02 - Exec(24) done in 94 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:41:02 - Interface List . 2024.05.11 23:41:02 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:41:02 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:41:02 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:41:02 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:41:02 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:41:02 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:41:02 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:41:02 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:41:02 - =========================================================================== . 2024.05.11 23:41:02 - IPv6 Route Table . 2024.05.11 23:41:02 - =========================================================================== . 2024.05.11 23:41:02 - Active Routes: . 2024.05.11 23:41:02 - If Metric Network Destination Gateway . 2024.05.11 23:41:02 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:41:02 - 1 331 ::1/128 On-link . 2024.05.11 23:41:02 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:41:02 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:41:02 - On-link . 2024.05.11 23:41:02 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:41:02 - On-link . 2024.05.11 23:41:02 - 20 261 fde6:7a:7d20:d4a::/64 fe80::8 . 2024.05.11 23:41:02 - 20 261 fe80::/64 On-link . 2024.05.11 23:41:02 - 18 291 fe80::/64 On-link . 2024.05.11 23:41:02 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:41:02 - On-link . 2024.05.11 23:41:02 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:41:02 - On-link . 2024.05.11 23:41:02 - 1 331 ff00::/8 On-link . 2024.05.11 23:41:02 - 20 261 ff00::/8 On-link . 2024.05.11 23:41:02 - 18 291 ff00::/8 On-link . 2024.05.11 23:41:02 - =========================================================================== . 2024.05.11 23:41:02 - Persistent Routes: . 2024.05.11 23:41:02 - None' . 2024.05.11 23:41:02 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:d4a::/64 20 fe80::8 store=active . 2024.05.11 23:41:02 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:41:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:41:02 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:41:02 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:41:02 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:41:02 - Elevated: Command:set-interface-metric . 2024.05.11 23:41:02 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:41:02 - Elevated: Command:set-interface-metric . 2024.05.11 23:41:02 - Elevated: Command:wfp . 2024.05.11 23:41:03 - Elevated: Command:wfp . 2024.05.11 23:41:03 - Elevated: Command:wfp . 2024.05.11 23:41:03 - Above log line repeated 3 times more . 2024.05.11 23:41:03 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:41:03 - Elevated: Command:route-list . 2024.05.11 23:41:03 - Elevated: Command:windows-dns . 2024.05.11 23:41:03 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.17.74.1 register=primary validate=no', exit:0 . 2024.05.11 23:41:03 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.17.74.1) . 2024.05.11 23:41:03 - Elevated: Command:windows-dns . 2024.05.11 23:41:03 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:d4a::1 register=primary validate=no', exit:0 . 2024.05.11 23:41:03 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:d4a::1) . 2024.05.11 23:41:03 - Elevated: Command:windows-dns . 2024.05.11 23:41:04 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.17.74.1 register=primary validate=no', exit:0 . 2024.05.11 23:41:04 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.17.74.1) . 2024.05.11 23:41:04 - Elevated: Command:windows-dns . 2024.05.11 23:41:04 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:d4a::1 register=primary validate=no', exit:0 . 2024.05.11 23:41:04 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:d4a::1) . 2024.05.11 23:41:04 - Elevated: Command:route-list . 2024.05.11 23:41:04 - Elevated: Command:route . 2024.05.11 23:41:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:05 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:05 - Elevated: Command:route-list . 2024.05.11 23:41:05 - Elevated: Command:route . 2024.05.11 23:41:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:05 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:06 - Elevated: Command:route-list . 2024.05.11 23:41:06 - Elevated: Command:route . 2024.05.11 23:41:06 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:06 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:06 - Elevated: Command:route-list . 2024.05.11 23:41:07 - Elevated: Command:route . 2024.05.11 23:41:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:07 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:07 - Elevated: Command:route-list . 2024.05.11 23:41:07 - Elevated: Command:route . 2024.05.11 23:41:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.74/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:08 - Routes, add 213.152.162.74/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:08 - Elevated: Command:route-list . 2024.05.11 23:41:08 - Elevated: Command:route . 2024.05.11 23:41:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:28:9cd5:9960:54c7:d0e5/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:08 - Routes, add 2a00:1678:2470:28:9cd5:9960:54c7:d0e5/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:08 - Flushing DNS . 2024.05.11 23:41:08 - Elevated: Command:dns-flush . 2024.05.11 23:41:08 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:41:08 - NET . 2024.05.11 23:41:08 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:41:08 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:41:08 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:41:08 - Exec(25) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:41:08 - Exec(25) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:41:08 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:41:08 - Checking route IPv4 . 2024.05.11 23:41:15 - Checking route (4° try) . 2024.05.11 23:41:19 - Checking route (5° try) E 2024.05.11 23:41:20 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:41:20 - Disconnecting . 2024.05.11 23:41:20 - Sending soft termination signal . 2024.05.11 23:41:20 - Elevated: Command:openvpn . 2024.05.11 23:41:23 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:41:25 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:41:25 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:d4a::/64) . 2024.05.11 23:41:25 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:d4a::/64 20 fe80::8 store=active . 2024.05.11 23:41:25 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:d4a::10c1 store=active . 2024.05.11 23:41:25 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.17.74.195 store=active . 2024.05.11 23:41:25 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:41:26 - Elevated: Command:route-list . 2024.05.11 23:41:26 - Elevated: Command:route . 2024.05.11 23:41:26 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:26 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:26 - Elevated: Command:route-list . 2024.05.11 23:41:26 - Elevated: Command:route . 2024.05.11 23:41:27 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:27 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:27 - Elevated: Command:route-list . 2024.05.11 23:41:27 - Elevated: Command:route . 2024.05.11 23:41:27 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:27 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:28 - Elevated: Command:route-list . 2024.05.11 23:41:28 - Elevated: Command:route . 2024.05.11 23:41:28 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:28 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:28 - Elevated: Command:route-list . 2024.05.11 23:41:29 - Elevated: Command:route . 2024.05.11 23:41:29 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.76/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:29 - Routes, delete 213.152.162.76/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:41:29 - Elevated: Command:route-list . 2024.05.11 23:41:29 - Elevated: Command:route . 2024.05.11 23:41:29 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.74/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:29 - Routes, delete 213.152.162.74/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:30 - Elevated: Command:route-list . 2024.05.11 23:41:30 - Elevated: Command:route . 2024.05.11 23:41:30 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:28:9cd5:9960:54c7:d0e5/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:30 - Routes, delete 2a00:1678:2470:28:9cd5:9960:54c7:d0e5/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:30 - Elevated: Command:route-list . 2024.05.11 23:41:30 - Routes, delete 213.152.162.76/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:41:30 - Elevated: Command:windows-dns . 2024.05.11 23:41:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:41:31 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:41:31 - Elevated: Command:windows-dns . 2024.05.11 23:41:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:41:31 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:41:31 - Elevated: Command:windows-dns . 2024.05.11 23:41:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:41:31 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:41:31 - Elevated: Command:windows-dns . 2024.05.11 23:41:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:41:31 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:41:31 - Elevated: Command:wfp . 2024.05.11 23:41:31 - Elevated: Command:wfp . 2024.05.11 23:41:31 - Elevated: Command:wfp . 2024.05.11 23:41:31 - Above log line repeated 3 times more . 2024.05.11 23:41:31 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:41:31 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:41:31 - Elevated: Command:set-interface-metric . 2024.05.11 23:41:31 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:41:31 - Elevated: Command:set-interface-metric . 2024.05.11 23:41:31 - Elevated: Command:wfp . 2024.05.11 23:41:31 - Elevated: Command:wfp . 2024.05.11 23:41:31 - Elevated: Command:wfp . 2024.05.11 23:41:31 - Above log line repeated 9 times more . 2024.05.11 23:41:31 - Connection terminated. I 2024.05.11 23:41:35 - Checking authorization ... . 2024.05.11 23:41:35 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:41:35 - Connecting to Sheliak (Netherlands, Alblasserdam) . 2024.05.11 23:41:36 - Elevated: Command:route-list . 2024.05.11 23:41:36 - Elevated: Command:route . 2024.05.11 23:41:36 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.186.37/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:36 - Routes, add 213.152.186.37/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:41:36 - Elevated: Command:route-list . 2024.05.11 23:41:36 - Routes, add 213.152.186.37/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:41:36 - Elevated: Command:wfp . 2024.05.11 23:41:36 - Elevated: Command:wfp . 2024.05.11 23:41:36 - Elevated: Command:wfp . 2024.05.11 23:41:36 - Above log line repeated 3 times more . 2024.05.11 23:41:36 - Elevated: Command:openvpn . 2024.05.11 23:41:37 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:41:37 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:41:37 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:41:37 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:41:37 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:41:37 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:41:37 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:41:37 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.186.37:443 . 2024.05.11 23:41:37 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:41:37 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:41:37 - OpenVPN > UDP link remote: [AF_INET]213.152.186.37:443 . 2024.05.11 23:41:37 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.186.37:443, sid=c75c4cea 5ced5142 . 2024.05.11 23:41:37 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:41:37 - OpenVPN > VERIFY KU OK . 2024.05.11 23:41:37 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:41:37 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:41:37 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:41:37 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Sheliak, emailAddress=info@airvpn.org . 2024.05.11 23:41:37 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:41:37 - OpenVPN > [Sheliak] Peer Connection Initiated with [AF_INET]213.152.186.37:443 . 2024.05.11 23:41:37 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.30.42.1,dhcp-option DNS6 fde6:7a:7d20:1a2a::1,tun-ipv6,route-gateway 10.30.42.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:1a2a::101f/64 fde6:7a:7d20:1a2a::1,ifconfig 10.30.42.33 255.255.255.0,peer-id 1,cipher AES-256-GCM' . 2024.05.11 23:41:37 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:41:37 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.30.42.1' . 2024.05.11 23:41:37 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:1a2a::1' . 2024.05.11 23:41:37 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:41:37 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:41:37 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:41:37 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:41:37 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:41:37 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:41:37 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:41:37 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:41:37 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:41:37 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:41:37 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:41:37 - OpenVPN > open_tun . 2024.05.11 23:41:37 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:41:37 - Elevated: Command:wfp . 2024.05.11 23:41:37 - Elevated: Command:wfp . 2024.05.11 23:41:37 - Elevated: Command:wfp . 2024.05.11 23:41:37 - Above log line repeated 3 times more . 2024.05.11 23:41:37 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.30.42.33 255.255.255.0 . 2024.05.11 23:41:37 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:41:37 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:41:37 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:41:37 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:1a2a::101f/128 store=active . 2024.05.11 23:41:38 - OpenVPN > add_route_ipv6(fde6:7a:7d20:1a2a::/64 -> fde6:7a:7d20:1a2a::101f metric 0) dev Local Area Connection . 2024.05.11 23:41:38 - Exec(26) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:41:38 - Exec(26) done in 328 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:41:38 - Interface List . 2024.05.11 23:41:38 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:41:38 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:41:38 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:41:38 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:41:38 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:41:38 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:41:38 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:41:38 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:41:38 - =========================================================================== . 2024.05.11 23:41:38 - IPv6 Route Table . 2024.05.11 23:41:38 - =========================================================================== . 2024.05.11 23:41:38 - Active Routes: . 2024.05.11 23:41:38 - If Metric Network Destination Gateway . 2024.05.11 23:41:38 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:41:38 - 1 331 ::1/128 On-link . 2024.05.11 23:41:38 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:41:38 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:41:38 - On-link . 2024.05.11 23:41:38 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:41:38 - On-link . 2024.05.11 23:41:38 - 20 261 fde6:7a:7d20:1a2a::/64 fe80::8 . 2024.05.11 23:41:38 - 20 261 fe80::/64 On-link . 2024.05.11 23:41:38 - 18 291 fe80::/64 On-link . 2024.05.11 23:41:38 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:41:38 - On-link . 2024.05.11 23:41:38 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:41:38 - On-link . 2024.05.11 23:41:38 - 1 331 ff00::/8 On-link . 2024.05.11 23:41:38 - 20 261 ff00::/8 On-link . 2024.05.11 23:41:38 - 18 291 ff00::/8 On-link . 2024.05.11 23:41:38 - =========================================================================== . 2024.05.11 23:41:38 - Persistent Routes: . 2024.05.11 23:41:38 - None' . 2024.05.11 23:41:38 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:1a2a::/64 20 fe80::8 store=active . 2024.05.11 23:41:38 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:41:38 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:41:38 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:41:38 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:41:38 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:41:38 - Elevated: Command:set-interface-metric . 2024.05.11 23:41:39 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:41:39 - Elevated: Command:set-interface-metric . 2024.05.11 23:41:39 - Elevated: Command:wfp . 2024.05.11 23:41:39 - Elevated: Command:wfp . 2024.05.11 23:41:39 - Elevated: Command:wfp . 2024.05.11 23:41:39 - Above log line repeated 3 times more . 2024.05.11 23:41:39 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:41:39 - Elevated: Command:route-list . 2024.05.11 23:41:39 - Elevated: Command:windows-dns . 2024.05.11 23:41:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.30.42.1 register=primary validate=no', exit:0 . 2024.05.11 23:41:39 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.30.42.1) . 2024.05.11 23:41:39 - Elevated: Command:windows-dns . 2024.05.11 23:41:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:1a2a::1 register=primary validate=no', exit:0 . 2024.05.11 23:41:39 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:1a2a::1) . 2024.05.11 23:41:39 - Elevated: Command:windows-dns . 2024.05.11 23:41:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.30.42.1 register=primary validate=no', exit:0 . 2024.05.11 23:41:40 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.30.42.1) . 2024.05.11 23:41:40 - Elevated: Command:windows-dns . 2024.05.11 23:41:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:1a2a::1 register=primary validate=no', exit:0 . 2024.05.11 23:41:40 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:1a2a::1) . 2024.05.11 23:41:40 - Elevated: Command:route-list . 2024.05.11 23:41:40 - Elevated: Command:route . 2024.05.11 23:41:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:41 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:41 - Elevated: Command:route-list . 2024.05.11 23:41:41 - Elevated: Command:route . 2024.05.11 23:41:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:41 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:42 - Elevated: Command:route-list . 2024.05.11 23:41:42 - Elevated: Command:route . 2024.05.11 23:41:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:42 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:43 - Elevated: Command:route-list . 2024.05.11 23:41:43 - Elevated: Command:route . 2024.05.11 23:41:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:43 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:43 - Elevated: Command:route-list . 2024.05.11 23:41:44 - Elevated: Command:route . 2024.05.11 23:41:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.186.35/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:44 - Routes, add 213.152.186.35/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:44 - Elevated: Command:route-list . 2024.05.11 23:41:44 - Elevated: Command:route . 2024.05.11 23:41:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:1337:2330:7adc:2279:d421:9f2f/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:41:44 - Routes, add 2a00:1678:1337:2330:7adc:2279:d421:9f2f/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:41:44 - Flushing DNS . 2024.05.11 23:41:44 - Elevated: Command:dns-flush . 2024.05.11 23:41:45 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:41:45 - NET . 2024.05.11 23:41:45 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:41:45 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:41:45 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:41:45 - Exec(27) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:41:45 - Exec(27) done in 63 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:41:45 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:41:45 - Checking route IPv4 . 2024.05.11 23:41:51 - Checking route (4° try) . 2024.05.11 23:41:56 - Checking route (5° try) E 2024.05.11 23:41:56 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:41:56 - Disconnecting . 2024.05.11 23:41:56 - Sending soft termination signal . 2024.05.11 23:41:56 - Elevated: Command:openvpn . 2024.05.11 23:41:59 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:42:01 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:42:01 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:1a2a::/64) . 2024.05.11 23:42:01 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:1a2a::/64 20 fe80::8 store=active . 2024.05.11 23:42:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:1a2a::101f store=active . 2024.05.11 23:42:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.30.42.33 store=active . 2024.05.11 23:42:02 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:42:02 - Elevated: Command:route-list . 2024.05.11 23:42:03 - Elevated: Command:route . 2024.05.11 23:42:03 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:03 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:03 - Elevated: Command:route-list . 2024.05.11 23:42:03 - Elevated: Command:route . 2024.05.11 23:42:03 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:03 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:04 - Elevated: Command:route-list . 2024.05.11 23:42:04 - Elevated: Command:route . 2024.05.11 23:42:04 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:04 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:05 - Elevated: Command:route-list . 2024.05.11 23:42:05 - Elevated: Command:route . 2024.05.11 23:42:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:05 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:05 - Elevated: Command:route-list . 2024.05.11 23:42:05 - Elevated: Command:route . 2024.05.11 23:42:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.186.37/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:05 - Routes, delete 213.152.186.37/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:42:06 - Elevated: Command:route-list . 2024.05.11 23:42:06 - Elevated: Command:route . 2024.05.11 23:42:06 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.186.35/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:06 - Routes, delete 213.152.186.35/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:06 - Elevated: Command:route-list . 2024.05.11 23:42:07 - Elevated: Command:route . 2024.05.11 23:42:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:1337:2330:7adc:2279:d421:9f2f/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:07 - Routes, delete 2a00:1678:1337:2330:7adc:2279:d421:9f2f/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:07 - Elevated: Command:route-list . 2024.05.11 23:42:07 - Routes, delete 213.152.186.37/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:42:07 - Elevated: Command:windows-dns . 2024.05.11 23:42:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:07 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:42:07 - Elevated: Command:windows-dns . 2024.05.11 23:42:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:07 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:42:07 - Elevated: Command:windows-dns . 2024.05.11 23:42:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:08 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:42:08 - Elevated: Command:windows-dns . 2024.05.11 23:42:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:08 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:42:08 - Elevated: Command:wfp . 2024.05.11 23:42:08 - Elevated: Command:wfp . 2024.05.11 23:42:08 - Elevated: Command:wfp . 2024.05.11 23:42:08 - Above log line repeated 3 times more . 2024.05.11 23:42:08 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:42:08 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:42:08 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:08 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:42:08 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:08 - Elevated: Command:wfp . 2024.05.11 23:42:08 - Elevated: Command:wfp . 2024.05.11 23:42:08 - Elevated: Command:wfp . 2024.05.11 23:42:08 - Above log line repeated 9 times more . 2024.05.11 23:42:08 - Connection terminated. I 2024.05.11 23:42:11 - Checking authorization ... . 2024.05.11 23:42:12 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:42:12 - Connecting to Kocab (Netherlands, Alblasserdam) . 2024.05.11 23:42:12 - Elevated: Command:route-list . 2024.05.11 23:42:13 - Elevated: Command:route . 2024.05.11 23:42:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.183/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:13 - Routes, add 213.152.162.183/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:42:13 - Elevated: Command:route-list . 2024.05.11 23:42:13 - Routes, add 213.152.162.183/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:42:13 - Elevated: Command:wfp . 2024.05.11 23:42:13 - Elevated: Command:wfp . 2024.05.11 23:42:13 - Elevated: Command:wfp . 2024.05.11 23:42:13 - Above log line repeated 3 times more . 2024.05.11 23:42:13 - Elevated: Command:openvpn . 2024.05.11 23:42:13 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:42:13 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:42:13 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:42:13 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:42:13 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:42:13 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:42:13 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:42:13 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.162.183:443 . 2024.05.11 23:42:13 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:42:13 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:42:13 - OpenVPN > UDP link remote: [AF_INET]213.152.162.183:443 . 2024.05.11 23:42:13 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.162.183:443, sid=3022f115 c1177547 . 2024.05.11 23:42:13 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:42:13 - OpenVPN > VERIFY KU OK . 2024.05.11 23:42:13 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:42:13 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:42:13 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:42:13 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Kocab, emailAddress=info@airvpn.org . 2024.05.11 23:42:13 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:42:13 - OpenVPN > [Kocab] Peer Connection Initiated with [AF_INET]213.152.162.183:443 . 2024.05.11 23:42:14 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.20.106.1,dhcp-option DNS6 fde6:7a:7d20:106a::1,tun-ipv6,route-gateway 10.20.106.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:106a::109c/64 fde6:7a:7d20:106a::1,ifconfig 10.20.106.158 255.255.255.0,peer-id 1,cipher AES-256-GCM' . 2024.05.11 23:42:14 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:42:14 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.20.106.1' . 2024.05.11 23:42:14 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:106a::1' . 2024.05.11 23:42:14 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:42:14 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:42:14 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:42:14 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:42:14 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:42:14 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:42:14 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:42:14 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:42:14 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:42:14 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:42:14 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:42:14 - OpenVPN > open_tun . 2024.05.11 23:42:14 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:42:14 - Elevated: Command:wfp . 2024.05.11 23:42:14 - Elevated: Command:wfp . 2024.05.11 23:42:14 - Elevated: Command:wfp . 2024.05.11 23:42:14 - Above log line repeated 3 times more . 2024.05.11 23:42:14 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.20.106.158 255.255.255.0 . 2024.05.11 23:42:14 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:42:14 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:42:14 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:42:14 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:106a::109c/128 store=active . 2024.05.11 23:42:14 - OpenVPN > add_route_ipv6(fde6:7a:7d20:106a::/64 -> fde6:7a:7d20:106a::109c metric 0) dev Local Area Connection . 2024.05.11 23:42:14 - Exec(28) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:42:14 - Exec(28) done in 78 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:42:14 - Interface List . 2024.05.11 23:42:14 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:42:14 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:42:14 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:42:14 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:42:14 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:42:14 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:42:14 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:42:14 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:42:14 - =========================================================================== . 2024.05.11 23:42:14 - IPv6 Route Table . 2024.05.11 23:42:14 - =========================================================================== . 2024.05.11 23:42:14 - Active Routes: . 2024.05.11 23:42:14 - If Metric Network Destination Gateway . 2024.05.11 23:42:14 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:42:14 - 1 331 ::1/128 On-link . 2024.05.11 23:42:14 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:42:14 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:42:14 - On-link . 2024.05.11 23:42:14 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:42:14 - On-link . 2024.05.11 23:42:14 - 20 261 fe80::/64 On-link . 2024.05.11 23:42:14 - 18 291 fe80::/64 On-link . 2024.05.11 23:42:14 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:42:14 - On-link . 2024.05.11 23:42:14 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:42:14 - On-link . 2024.05.11 23:42:14 - 1 331 ff00::/8 On-link . 2024.05.11 23:42:14 - 20 261 ff00::/8 On-link . 2024.05.11 23:42:14 - 18 291 ff00::/8 On-link . 2024.05.11 23:42:14 - =========================================================================== . 2024.05.11 23:42:14 - Persistent Routes: . 2024.05.11 23:42:14 - None' . 2024.05.11 23:42:14 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:106a::/64 20 fe80::8 store=active . 2024.05.11 23:42:14 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:42:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:42:15 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:42:15 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:42:15 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:42:15 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:15 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:42:15 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:15 - Elevated: Command:wfp . 2024.05.11 23:42:15 - Elevated: Command:wfp . 2024.05.11 23:42:15 - Elevated: Command:wfp . 2024.05.11 23:42:15 - Above log line repeated 3 times more . 2024.05.11 23:42:15 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:42:15 - Elevated: Command:route-list . 2024.05.11 23:42:15 - Elevated: Command:windows-dns . 2024.05.11 23:42:15 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.20.106.1 register=primary validate=no', exit:0 . 2024.05.11 23:42:15 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.20.106.1) . 2024.05.11 23:42:15 - Elevated: Command:windows-dns . 2024.05.11 23:42:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:106a::1 register=primary validate=no', exit:0 . 2024.05.11 23:42:16 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:106a::1) . 2024.05.11 23:42:16 - Elevated: Command:windows-dns . 2024.05.11 23:42:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.20.106.1 register=primary validate=no', exit:0 . 2024.05.11 23:42:16 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.20.106.1) . 2024.05.11 23:42:16 - Elevated: Command:windows-dns . 2024.05.11 23:42:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:106a::1 register=primary validate=no', exit:0 . 2024.05.11 23:42:16 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:106a::1) . 2024.05.11 23:42:16 - Elevated: Command:route-list . 2024.05.11 23:42:16 - Elevated: Command:route . 2024.05.11 23:42:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:17 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:17 - Elevated: Command:route-list . 2024.05.11 23:42:17 - Elevated: Command:route . 2024.05.11 23:42:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:17 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:18 - Elevated: Command:route-list . 2024.05.11 23:42:18 - Elevated: Command:route . 2024.05.11 23:42:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:18 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:18 - Elevated: Command:route-list . 2024.05.11 23:42:19 - Elevated: Command:route . 2024.05.11 23:42:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:19 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:19 - Elevated: Command:route-list . 2024.05.11 23:42:19 - Elevated: Command:route . 2024.05.11 23:42:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.181/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:19 - Routes, add 213.152.162.181/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:20 - Elevated: Command:route-list . 2024.05.11 23:42:20 - Elevated: Command:route . 2024.05.11 23:42:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:11:4dff:fc6d:6c59:e6a3/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:20 - Routes, add 2a00:1678:2470:11:4dff:fc6d:6c59:e6a3/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:20 - Flushing DNS . 2024.05.11 23:42:20 - Elevated: Command:dns-flush . 2024.05.11 23:42:20 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:42:20 - NET . 2024.05.11 23:42:20 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:42:20 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:42:20 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:42:21 - Exec(29) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:42:21 - Exec(29) done in 79 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:42:21 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:42:21 - Checking route IPv4 . 2024.05.11 23:42:27 - Checking route (4° try) . 2024.05.11 23:42:31 - Checking route (5° try) E 2024.05.11 23:42:32 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:42:32 - Disconnecting . 2024.05.11 23:42:32 - Sending soft termination signal . 2024.05.11 23:42:32 - Elevated: Command:openvpn . 2024.05.11 23:42:35 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:42:36 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:42:36 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:106a::/64) . 2024.05.11 23:42:36 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:106a::/64 20 fe80::8 store=active . 2024.05.11 23:42:36 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:106a::109c store=active . 2024.05.11 23:42:36 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.20.106.158 store=active . 2024.05.11 23:42:36 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:42:37 - Elevated: Command:route-list . 2024.05.11 23:42:37 - Elevated: Command:route . 2024.05.11 23:42:37 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:37 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:37 - Elevated: Command:route-list . 2024.05.11 23:42:38 - Elevated: Command:route . 2024.05.11 23:42:38 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:38 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:38 - Elevated: Command:route-list . 2024.05.11 23:42:38 - Elevated: Command:route . 2024.05.11 23:42:38 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:38 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:39 - Elevated: Command:route-list . 2024.05.11 23:42:39 - Elevated: Command:route . 2024.05.11 23:42:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:39 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:40 - Elevated: Command:route-list . 2024.05.11 23:42:40 - Elevated: Command:route . 2024.05.11 23:42:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.183/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:40 - Routes, delete 213.152.162.183/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:42:40 - Elevated: Command:route-list . 2024.05.11 23:42:40 - Elevated: Command:route . 2024.05.11 23:42:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.181/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:40 - Routes, delete 213.152.162.181/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:41 - Elevated: Command:route-list . 2024.05.11 23:42:41 - Elevated: Command:route . 2024.05.11 23:42:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:11:4dff:fc6d:6c59:e6a3/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:41 - Routes, delete 2a00:1678:2470:11:4dff:fc6d:6c59:e6a3/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:42 - Elevated: Command:route-list . 2024.05.11 23:42:42 - Routes, delete 213.152.162.183/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:42:42 - Elevated: Command:windows-dns . 2024.05.11 23:42:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:42 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:42:42 - Elevated: Command:windows-dns . 2024.05.11 23:42:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:42 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:42:42 - Elevated: Command:windows-dns . 2024.05.11 23:42:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:42 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:42:42 - Elevated: Command:windows-dns . 2024.05.11 23:42:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:42:42 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:42:42 - Elevated: Command:wfp . 2024.05.11 23:42:42 - Elevated: Command:wfp . 2024.05.11 23:42:42 - Elevated: Command:wfp . 2024.05.11 23:42:42 - Above log line repeated 3 times more . 2024.05.11 23:42:42 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:42:42 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:42:42 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:42 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:42:42 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:42 - Elevated: Command:wfp . 2024.05.11 23:42:42 - Elevated: Command:wfp . 2024.05.11 23:42:42 - Elevated: Command:wfp . 2024.05.11 23:42:42 - Above log line repeated 9 times more . 2024.05.11 23:42:42 - Connection terminated. I 2024.05.11 23:42:46 - Checking authorization ... . 2024.05.11 23:42:46 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:42:47 - Connecting to Alrai (Netherlands, Alblasserdam) . 2024.05.11 23:42:47 - Elevated: Command:route-list . 2024.05.11 23:42:47 - Elevated: Command:route . 2024.05.11 23:42:47 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.81/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:47 - Routes, add 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:42:48 - Elevated: Command:route-list . 2024.05.11 23:42:48 - Routes, add 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:42:48 - Elevated: Command:wfp . 2024.05.11 23:42:48 - Elevated: Command:wfp . 2024.05.11 23:42:48 - Elevated: Command:wfp . 2024.05.11 23:42:48 - Above log line repeated 3 times more . 2024.05.11 23:42:48 - Elevated: Command:openvpn . 2024.05.11 23:42:48 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:42:48 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:42:48 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:42:48 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:42:48 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:42:48 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:42:48 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:42:48 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.162.81:443 . 2024.05.11 23:42:48 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:42:48 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:42:48 - OpenVPN > UDP link remote: [AF_INET]213.152.162.81:443 . 2024.05.11 23:42:48 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.162.81:443, sid=fa450b16 12f27356 . 2024.05.11 23:42:48 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:42:48 - OpenVPN > VERIFY KU OK . 2024.05.11 23:42:48 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:42:48 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:42:48 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:42:48 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Alrai, emailAddress=info@airvpn.org . 2024.05.11 23:42:48 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:42:48 - OpenVPN > [Alrai] Peer Connection Initiated with [AF_INET]213.152.162.81:443 . 2024.05.11 23:42:48 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.7.138.1,dhcp-option DNS6 fde6:7a:7d20:38a::1,tun-ipv6,route-gateway 10.7.138.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:38a::107a/64 fde6:7a:7d20:38a::1,ifconfig 10.7.138.124 255.255.255.0,peer-id 6,cipher AES-256-GCM' . 2024.05.11 23:42:48 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:42:48 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.7.138.1' . 2024.05.11 23:42:48 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:38a::1' . 2024.05.11 23:42:48 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:42:48 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:42:48 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:42:48 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:42:48 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:42:48 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:42:48 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:42:48 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:42:48 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:42:48 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:42:48 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:42:48 - OpenVPN > open_tun . 2024.05.11 23:42:48 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:42:49 - Elevated: Command:wfp . 2024.05.11 23:42:49 - Elevated: Command:wfp . 2024.05.11 23:42:49 - Elevated: Command:wfp . 2024.05.11 23:42:49 - Above log line repeated 3 times more . 2024.05.11 23:42:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.7.138.124 255.255.255.0 . 2024.05.11 23:42:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:42:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:42:49 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:42:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:38a::107a/128 store=active . 2024.05.11 23:42:49 - OpenVPN > add_route_ipv6(fde6:7a:7d20:38a::/64 -> fde6:7a:7d20:38a::107a metric 0) dev Local Area Connection . 2024.05.11 23:42:49 - Exec(30) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:42:49 - Exec(30) done in 93 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:42:49 - Interface List . 2024.05.11 23:42:49 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:42:49 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:42:49 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:42:49 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:42:49 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:42:49 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:42:49 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:42:49 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:42:49 - =========================================================================== . 2024.05.11 23:42:49 - IPv6 Route Table . 2024.05.11 23:42:49 - =========================================================================== . 2024.05.11 23:42:49 - Active Routes: . 2024.05.11 23:42:49 - If Metric Network Destination Gateway . 2024.05.11 23:42:49 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:42:49 - 1 331 ::1/128 On-link . 2024.05.11 23:42:49 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:42:49 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:42:49 - On-link . 2024.05.11 23:42:49 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:42:49 - On-link . 2024.05.11 23:42:49 - 20 261 fde6:7a:7d20:38a::/64 fe80::8 . 2024.05.11 23:42:49 - 20 261 fe80::/64 On-link . 2024.05.11 23:42:49 - 18 291 fe80::/64 On-link . 2024.05.11 23:42:49 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:42:49 - On-link . 2024.05.11 23:42:49 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:42:49 - On-link . 2024.05.11 23:42:49 - 1 331 ff00::/8 On-link . 2024.05.11 23:42:49 - 20 261 ff00::/8 On-link . 2024.05.11 23:42:49 - 18 291 ff00::/8 On-link . 2024.05.11 23:42:49 - =========================================================================== . 2024.05.11 23:42:49 - Persistent Routes: . 2024.05.11 23:42:49 - None' . 2024.05.11 23:42:49 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:38a::/64 20 fe80::8 store=active . 2024.05.11 23:42:49 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:42:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:42:49 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:42:49 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:42:49 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:42:49 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:49 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:42:49 - Elevated: Command:set-interface-metric . 2024.05.11 23:42:49 - Elevated: Command:wfp . 2024.05.11 23:42:49 - Elevated: Command:wfp . 2024.05.11 23:42:49 - Elevated: Command:wfp . 2024.05.11 23:42:50 - Above log line repeated 3 times more . 2024.05.11 23:42:50 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:42:50 - Elevated: Command:route-list . 2024.05.11 23:42:50 - Elevated: Command:windows-dns . 2024.05.11 23:42:50 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.7.138.1 register=primary validate=no', exit:0 . 2024.05.11 23:42:50 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.7.138.1) . 2024.05.11 23:42:50 - Elevated: Command:windows-dns . 2024.05.11 23:42:50 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:38a::1 register=primary validate=no', exit:0 . 2024.05.11 23:42:50 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:38a::1) . 2024.05.11 23:42:50 - Elevated: Command:windows-dns . 2024.05.11 23:42:50 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.7.138.1 register=primary validate=no', exit:0 . 2024.05.11 23:42:50 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.7.138.1) . 2024.05.11 23:42:50 - Elevated: Command:windows-dns . 2024.05.11 23:42:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:38a::1 register=primary validate=no', exit:0 . 2024.05.11 23:42:51 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:38a::1) . 2024.05.11 23:42:51 - Elevated: Command:route-list . 2024.05.11 23:42:51 - Elevated: Command:route . 2024.05.11 23:42:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:51 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:52 - Elevated: Command:route-list . 2024.05.11 23:42:52 - Elevated: Command:route . 2024.05.11 23:42:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:52 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:52 - Elevated: Command:route-list . 2024.05.11 23:42:53 - Elevated: Command:route . 2024.05.11 23:42:53 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:53 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:53 - Elevated: Command:route-list . 2024.05.11 23:42:53 - Elevated: Command:route . 2024.05.11 23:42:53 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:53 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:54 - Elevated: Command:route-list . 2024.05.11 23:42:54 - Elevated: Command:route . 2024.05.11 23:42:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.79/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:54 - Routes, add 213.152.162.79/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:55 - Elevated: Command:route-list . 2024.05.11 23:42:55 - Elevated: Command:route . 2024.05.11 23:42:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:29:26cb:b8f1:4b1:2636/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:42:55 - Routes, add 2a00:1678:2470:29:26cb:b8f1:4b1:2636/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:42:55 - Flushing DNS . 2024.05.11 23:42:55 - Elevated: Command:dns-flush . 2024.05.11 23:42:55 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:42:55 - NET . 2024.05.11 23:42:55 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:42:55 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:42:55 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:42:55 - Exec(31) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:42:55 - Exec(31) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:42:55 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:42:55 - Checking route IPv4 . 2024.05.11 23:43:02 - Checking route (4° try) . 2024.05.11 23:43:06 - Checking route (5° try) E 2024.05.11 23:43:07 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:43:07 - Disconnecting . 2024.05.11 23:43:07 - Sending soft termination signal . 2024.05.11 23:43:07 - Elevated: Command:openvpn . 2024.05.11 23:43:10 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:43:11 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:43:11 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:38a::/64) . 2024.05.11 23:43:11 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:38a::/64 20 fe80::8 store=active . 2024.05.11 23:43:11 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:38a::107a store=active . 2024.05.11 23:43:12 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.7.138.124 store=active . 2024.05.11 23:43:12 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:43:12 - Elevated: Command:route-list . 2024.05.11 23:43:12 - Elevated: Command:route . 2024.05.11 23:43:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:13 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:13 - Elevated: Command:route-list . 2024.05.11 23:43:13 - Elevated: Command:route . 2024.05.11 23:43:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:13 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:14 - Elevated: Command:route-list . 2024.05.11 23:43:14 - Elevated: Command:route . 2024.05.11 23:43:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:14 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:14 - Elevated: Command:route-list . 2024.05.11 23:43:14 - Elevated: Command:route . 2024.05.11 23:43:15 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:15 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:15 - Elevated: Command:route-list . 2024.05.11 23:43:15 - Elevated: Command:route . 2024.05.11 23:43:15 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.81/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:15 - Routes, delete 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:43:16 - Elevated: Command:route-list . 2024.05.11 23:43:16 - Elevated: Command:route . 2024.05.11 23:43:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.79/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:16 - Routes, delete 213.152.162.79/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:16 - Elevated: Command:route-list . 2024.05.11 23:43:16 - Elevated: Command:route . 2024.05.11 23:43:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:29:26cb:b8f1:4b1:2636/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:17 - Routes, delete 2a00:1678:2470:29:26cb:b8f1:4b1:2636/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:17 - Elevated: Command:route-list . 2024.05.11 23:43:17 - Routes, delete 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:43:17 - Elevated: Command:windows-dns . 2024.05.11 23:43:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:43:17 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:43:17 - Elevated: Command:windows-dns . 2024.05.11 23:43:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:43:17 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:43:17 - Elevated: Command:windows-dns . 2024.05.11 23:43:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:43:17 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:43:17 - Elevated: Command:windows-dns . 2024.05.11 23:43:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:43:18 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:43:18 - Elevated: Command:wfp . 2024.05.11 23:43:18 - Elevated: Command:wfp . 2024.05.11 23:43:18 - Elevated: Command:wfp . 2024.05.11 23:43:18 - Above log line repeated 3 times more . 2024.05.11 23:43:18 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:43:18 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:43:18 - Elevated: Command:set-interface-metric . 2024.05.11 23:43:18 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:43:18 - Elevated: Command:set-interface-metric . 2024.05.11 23:43:18 - Elevated: Command:wfp . 2024.05.11 23:43:18 - Elevated: Command:wfp . 2024.05.11 23:43:18 - Elevated: Command:wfp . 2024.05.11 23:43:18 - Above log line repeated 9 times more . 2024.05.11 23:43:18 - Connection terminated. . 2024.05.11 23:43:20 - Shutdown in progress I 2024.05.11 23:43:21 - Cancel requested. . 2024.05.11 23:43:21 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:43:21 - Session terminated. . 2024.05.11 23:43:21 - Deactivation of Network Lock . 2024.05.11 23:43:21 - Elevated: Command:wfp . 2024.05.11 23:43:21 - Elevated: Command:wfp . 2024.05.11 23:43:21 - Elevated: Command:wfp . 2024.05.11 23:43:21 - Above log line repeated 50 times more . 2024.05.11 23:43:21 - Elevated: Client soft disconnected . 2024.05.11 23:43:22 - Shutdown complete . 2024.05.11 23:43:29 - Reading options from C:\Users\Oc\AppData\Local\Eddie\default.profile . 2024.05.11 23:43:31 - Elevated: Command:wfp . 2024.05.11 23:43:31 - Elevated: Command:wfp . 2024.05.11 23:43:31 - Exec(1) of 'E:\Program Files\AirVPN\openvpn.exe', 1 args: '--version'; . 2024.05.11 23:43:31 - Exec(1) done in 94 ms, exit: 0, out: 'OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:43:31 - library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:43:31 - Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:43:31 - Originally developed by James Yonan . 2024.05.11 23:43:31 - Copyright (C) 2002-2021 OpenVPN Inc <sales@openvpn.net> . 2024.05.11 23:43:31 - Compile time defines: N/A' . 2024.05.11 23:43:31 - Exec(2) of 'E:\Program Files\AirVPN\plink.exe', 1 args: '-V'; . 2024.05.11 23:43:31 - Exec(2) done in 62 ms, exit: 0, out: 'plink: Release 0.73 . 2024.05.11 23:43:31 - Build platform: 64-bit x86 Windows . 2024.05.11 23:43:31 - Compiler: clang 7.0.0 (tags/RELEASE_700/final), emulating Visual Studio 2013 (12.0), _MSC_VER=1800 . 2024.05.11 23:43:31 - Source commit: 745ed3ad3beaf52fc623827e770b3a068b238dd5' . 2024.05.11 23:43:31 - Exec(3) of 'E:\Program Files\AirVPN\stunnel.exe', 1 args: '-version'; . 2024.05.11 23:43:31 - Exec(3) done in 94 ms, exit: 0, err: 'stunnel 5.56 on x86-pc-mingw32-gnu platform . 2024.05.11 23:43:31 - Compiled/running with OpenSSL 1.1.1g 21 Apr 2020 . 2024.05.11 23:43:31 - Threading:WIN32 Sockets:SELECT,IPv6 TLS:ENGINE,OCSP,PSK,SNI . 2024.05.11 23:43:31 - Global options: . 2024.05.11 23:43:31 - RNDbytes = 1024 . 2024.05.11 23:43:31 - RNDoverwrite = yes . 2024.05.11 23:43:31 - taskbar = yes . 2024.05.11 23:43:31 - Service-level options: . 2024.05.11 23:43:31 - ciphers = HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK . 2024.05.11 23:43:31 - ciphersuites = TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256 (with TLSv1.3) . 2024.05.11 23:43:31 - curves = X25519:P-256:X448:P-521:P-384 . 2024.05.11 23:43:31 - debug = notice . 2024.05.11 23:43:31 - logId = sequential . 2024.05.11 23:43:31 - options = NO_SSLv2 . 2024.05.11 23:43:31 - options = NO_SSLv3 . 2024.05.11 23:43:31 - sessionCacheSize = 1000 . 2024.05.11 23:43:31 - sessionCacheTimeout = 300 seconds . 2024.05.11 23:43:31 - stack = 65536 bytes . 2024.05.11 23:43:31 - TIMEOUTbusy = 300 seconds . 2024.05.11 23:43:31 - TIMEOUTclose = 60 seconds . 2024.05.11 23:43:31 - TIMEOUTconnect = 10 seconds . 2024.05.11 23:43:31 - TIMEOUTidle = 43200 seconds . 2024.05.11 23:43:31 - verify = none' . 2024.05.11 23:43:31 - OpenVPN - Version: 2.5.5 - OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 (E:\Program Files\AirVPN\openvpn.exe) . 2024.05.11 23:43:31 - SSH - Version: plink 0.73 (E:\Program Files\AirVPN\plink.exe) . 2024.05.11 23:43:31 - SSL - Version: stunnel 5.56 (E:\Program Files\AirVPN\stunnel.exe) . 2024.05.11 23:43:31 - Elevated: Command:wfp . 2024.05.11 23:43:32 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'WFP Show Filters file="C:\WINDOWS\TEMP\\eddie_tmp_wfp_rules.xml"', exit:0, out:'Data collection successful; output = C:\WINDOWS\TEMP\\eddie_tmp_wfp_rules.xml' . 2024.05.11 23:43:32 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:43:33 - Activation of Network Lock - Windows Filtering Platform . 2024.05.11 23:43:33 - Elevated: Command:wfp . 2024.05.11 23:43:33 - Elevated: Command:wfp . 2024.05.11 23:43:33 - Elevated: Command:wfp . 2024.05.11 23:43:34 - Above log line repeated 49 times more I 2024.05.11 23:43:34 - Ready . 2024.05.11 23:43:35 - Collect information about AirVPN completed I 2024.05.11 23:43:35 - Session starting. . 2024.05.11 23:43:36 - Collect information about AirVPN completed I 2024.05.11 23:43:37 - Checking authorization ... . 2024.05.11 23:43:37 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:43:38 - Connecting to Alphecca (Netherlands, Alblasserdam) . 2024.05.11 23:43:38 - Elevated: Command:route-list . 2024.05.11 23:43:38 - Elevated: Command:route . 2024.05.11 23:43:38 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.187.197/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:38 - Routes, add 213.152.187.197/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:43:39 - Elevated: Command:route-list . 2024.05.11 23:43:39 - Routes, add 213.152.187.197/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:43:39 - Elevated: Command:wfp . 2024.05.11 23:43:39 - Elevated: Command:wfp . 2024.05.11 23:43:39 - Elevated: Command:wfp . 2024.05.11 23:43:39 - Above log line repeated 3 times more . 2024.05.11 23:43:39 - Elevated: Command:openvpn . 2024.05.11 23:43:39 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:43:39 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:43:39 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:43:39 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:43:39 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:43:39 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:43:39 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:43:39 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.187.197:443 . 2024.05.11 23:43:39 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:43:39 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:43:39 - OpenVPN > UDP link remote: [AF_INET]213.152.187.197:443 . 2024.05.11 23:43:39 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.187.197:443, sid=9848c4fb 10daf133 . 2024.05.11 23:43:39 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:43:39 - OpenVPN > VERIFY KU OK . 2024.05.11 23:43:39 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:43:39 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:43:39 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:43:39 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Alphecca, emailAddress=info@airvpn.org . 2024.05.11 23:43:39 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:43:39 - OpenVPN > [Alphecca] Peer Connection Initiated with [AF_INET]213.152.187.197:443 . 2024.05.11 23:43:39 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.7.74.1,dhcp-option DNS6 fde6:7a:7d20:34a::1,tun-ipv6,route-gateway 10.7.74.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:34a::10cc/64 fde6:7a:7d20:34a::1,ifconfig 10.7.74.206 255.255.255.0,peer-id 9,cipher AES-256-GCM' . 2024.05.11 23:43:39 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:43:39 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.7.74.1' . 2024.05.11 23:43:39 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:34a::1' . 2024.05.11 23:43:39 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:43:39 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:43:39 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:43:39 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:43:39 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:43:39 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:43:39 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:43:39 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:43:39 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:43:39 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:43:39 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:43:39 - OpenVPN > open_tun . 2024.05.11 23:43:39 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:43:40 - Elevated: Command:wfp . 2024.05.11 23:43:40 - Elevated: Command:wfp . 2024.05.11 23:43:40 - Elevated: Command:wfp . 2024.05.11 23:43:40 - Above log line repeated 3 times more . 2024.05.11 23:43:40 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.7.74.206 255.255.255.0 . 2024.05.11 23:43:40 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:43:40 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:43:40 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:43:40 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:34a::10cc/128 store=active . 2024.05.11 23:43:40 - OpenVPN > add_route_ipv6(fde6:7a:7d20:34a::/64 -> fde6:7a:7d20:34a::10cc metric 0) dev Local Area Connection . 2024.05.11 23:43:40 - Exec(4) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:43:40 - Exec(4) done in 94 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:43:40 - Interface List . 2024.05.11 23:43:40 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:43:40 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:43:40 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:43:40 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:43:40 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:43:40 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:43:40 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:43:40 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:43:40 - =========================================================================== . 2024.05.11 23:43:40 - IPv6 Route Table . 2024.05.11 23:43:40 - =========================================================================== . 2024.05.11 23:43:40 - Active Routes: . 2024.05.11 23:43:40 - If Metric Network Destination Gateway . 2024.05.11 23:43:40 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:43:40 - 1 331 ::1/128 On-link . 2024.05.11 23:43:40 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:43:40 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:43:40 - On-link . 2024.05.11 23:43:40 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:43:40 - On-link . 2024.05.11 23:43:40 - 20 261 fde6:7a:7d20:34a::/64 fe80::8 . 2024.05.11 23:43:40 - 20 261 fe80::/64 On-link . 2024.05.11 23:43:40 - 18 291 fe80::/64 On-link . 2024.05.11 23:43:40 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:43:40 - On-link . 2024.05.11 23:43:40 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:43:40 - On-link . 2024.05.11 23:43:40 - 1 331 ff00::/8 On-link . 2024.05.11 23:43:40 - 20 261 ff00::/8 On-link . 2024.05.11 23:43:40 - 18 291 ff00::/8 On-link . 2024.05.11 23:43:40 - =========================================================================== . 2024.05.11 23:43:40 - Persistent Routes: . 2024.05.11 23:43:40 - None' . 2024.05.11 23:43:40 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:34a::/64 20 fe80::8 store=active . 2024.05.11 23:43:40 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:43:40 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:43:40 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:43:40 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:43:40 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:43:40 - Elevated: Command:set-interface-metric . 2024.05.11 23:43:40 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:43:40 - Elevated: Command:set-interface-metric . 2024.05.11 23:43:40 - Elevated: Command:wfp . 2024.05.11 23:43:40 - Elevated: Command:wfp . 2024.05.11 23:43:40 - Elevated: Command:wfp . 2024.05.11 23:43:40 - Above log line repeated 3 times more . 2024.05.11 23:43:40 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:43:41 - Elevated: Command:route-list . 2024.05.11 23:43:41 - Elevated: Command:windows-dns . 2024.05.11 23:43:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.7.74.1 register=primary validate=no', exit:0 . 2024.05.11 23:43:41 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.7.74.1) . 2024.05.11 23:43:41 - Elevated: Command:windows-dns . 2024.05.11 23:43:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:34a::1 register=primary validate=no', exit:0 . 2024.05.11 23:43:41 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:34a::1) . 2024.05.11 23:43:41 - Elevated: Command:windows-dns . 2024.05.11 23:43:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.7.74.1 register=primary validate=no', exit:0 . 2024.05.11 23:43:41 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.7.74.1) . 2024.05.11 23:43:41 - Elevated: Command:windows-dns . 2024.05.11 23:43:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:34a::1 register=primary validate=no', exit:0 . 2024.05.11 23:43:42 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:34a::1) . 2024.05.11 23:43:42 - Elevated: Command:route-list . 2024.05.11 23:43:42 - Elevated: Command:route . 2024.05.11 23:43:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:42 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:43 - Elevated: Command:route-list . 2024.05.11 23:43:43 - Elevated: Command:route . 2024.05.11 23:43:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:43 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:44 - Elevated: Command:route-list . 2024.05.11 23:43:44 - Elevated: Command:route . 2024.05.11 23:43:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:44 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:44 - Elevated: Command:route-list . 2024.05.11 23:43:45 - Elevated: Command:route . 2024.05.11 23:43:45 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:45 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:45 - Elevated: Command:route-list . 2024.05.11 23:43:45 - Elevated: Command:route . 2024.05.11 23:43:46 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.187.195/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:46 - Routes, add 213.152.187.195/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:46 - Elevated: Command:route-list . 2024.05.11 23:43:46 - Elevated: Command:route . 2024.05.11 23:43:46 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:1337:7a18:c5ea:bbd3:f07f:e29/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:43:46 - Routes, add 2a00:1678:1337:7a18:c5ea:bbd3:f07f:e29/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:43:46 - Flushing DNS . 2024.05.11 23:43:46 - Elevated: Command:dns-flush . 2024.05.11 23:43:47 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:43:47 - NET . 2024.05.11 23:43:47 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:43:47 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:43:47 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:43:47 - Exec(5) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:43:47 - Exec(5) done in 172 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:43:47 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:43:47 - Checking route IPv4 . 2024.05.11 23:43:57 - Checking route (4° try) . 2024.05.11 23:44:01 - Checking route (5° try) E 2024.05.11 23:44:01 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:44:01 - Disconnecting . 2024.05.11 23:44:01 - Sending soft termination signal . 2024.05.11 23:44:01 - Elevated: Command:openvpn . 2024.05.11 23:44:04 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:44:06 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:44:06 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:34a::/64) . 2024.05.11 23:44:06 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:34a::/64 20 fe80::8 store=active . 2024.05.11 23:44:06 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:34a::10cc store=active . 2024.05.11 23:44:06 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.7.74.206 store=active . 2024.05.11 23:44:06 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:44:07 - Elevated: Command:route-list . 2024.05.11 23:44:07 - Elevated: Command:route . 2024.05.11 23:44:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:07 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:08 - Elevated: Command:route-list . 2024.05.11 23:44:08 - Elevated: Command:route . 2024.05.11 23:44:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:08 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:08 - Elevated: Command:route-list . 2024.05.11 23:44:09 - Elevated: Command:route . 2024.05.11 23:44:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:09 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:09 - Elevated: Command:route-list . 2024.05.11 23:44:09 - Elevated: Command:route . 2024.05.11 23:44:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:09 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:10 - Elevated: Command:route-list . 2024.05.11 23:44:10 - Elevated: Command:route . 2024.05.11 23:44:10 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.187.197/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:10 - Routes, delete 213.152.187.197/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:44:11 - Elevated: Command:route-list . 2024.05.11 23:44:11 - Elevated: Command:route . 2024.05.11 23:44:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.187.195/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:11 - Routes, delete 213.152.187.195/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:11 - Elevated: Command:route-list . 2024.05.11 23:44:12 - Elevated: Command:route . 2024.05.11 23:44:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:1337:7a18:c5ea:bbd3:f07f:e29/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:12 - Routes, delete 2a00:1678:1337:7a18:c5ea:bbd3:f07f:e29/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:12 - Elevated: Command:route-list . 2024.05.11 23:44:12 - Routes, delete 213.152.187.197/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:44:12 - Elevated: Command:windows-dns . 2024.05.11 23:44:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:12 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:44:12 - Elevated: Command:windows-dns . 2024.05.11 23:44:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:12 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:44:12 - Elevated: Command:windows-dns . 2024.05.11 23:44:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:13 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:44:13 - Elevated: Command:windows-dns . 2024.05.11 23:44:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:13 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:44:13 - Elevated: Command:wfp . 2024.05.11 23:44:13 - Elevated: Command:wfp . 2024.05.11 23:44:13 - Elevated: Command:wfp . 2024.05.11 23:44:13 - Above log line repeated 3 times more . 2024.05.11 23:44:13 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:44:13 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:44:13 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:13 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:44:13 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:13 - Elevated: Command:wfp . 2024.05.11 23:44:13 - Elevated: Command:wfp . 2024.05.11 23:44:13 - Elevated: Command:wfp . 2024.05.11 23:44:13 - Above log line repeated 9 times more . 2024.05.11 23:44:13 - Connection terminated. I 2024.05.11 23:44:16 - Checking authorization ... . 2024.05.11 23:44:17 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:44:17 - Connecting to Tianyi (Netherlands, Alblasserdam) . 2024.05.11 23:44:18 - Elevated: Command:route-list . 2024.05.11 23:44:18 - Elevated: Command:route . 2024.05.11 23:44:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.186.175/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:18 - Routes, add 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:44:18 - Elevated: Command:route-list . 2024.05.11 23:44:18 - Routes, add 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:44:18 - Elevated: Command:wfp . 2024.05.11 23:44:18 - Elevated: Command:wfp . 2024.05.11 23:44:18 - Elevated: Command:wfp . 2024.05.11 23:44:18 - Above log line repeated 3 times more . 2024.05.11 23:44:18 - Elevated: Command:openvpn . 2024.05.11 23:44:19 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:44:19 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:44:19 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:44:19 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:44:19 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:44:19 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:44:19 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:44:19 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.186.175:443 . 2024.05.11 23:44:19 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:44:19 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:44:19 - OpenVPN > UDP link remote: [AF_INET]213.152.186.175:443 . 2024.05.11 23:44:19 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.186.175:443, sid=9e11e8da 992bb456 . 2024.05.11 23:44:19 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:44:19 - OpenVPN > VERIFY KU OK . 2024.05.11 23:44:19 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:44:19 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:44:19 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:44:19 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Tianyi, emailAddress=info@airvpn.org . 2024.05.11 23:44:19 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:44:19 - OpenVPN > [Tianyi] Peer Connection Initiated with [AF_INET]213.152.186.175:443 . 2024.05.11 23:44:19 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.7.10.1,dhcp-option DNS6 fde6:7a:7d20:30a::1,tun-ipv6,route-gateway 10.7.10.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:30a::1058/64 fde6:7a:7d20:30a::1,ifconfig 10.7.10.90 255.255.255.0,peer-id 3,cipher AES-256-GCM' . 2024.05.11 23:44:19 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:44:19 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.7.10.1' . 2024.05.11 23:44:19 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:30a::1' . 2024.05.11 23:44:19 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:44:19 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:44:19 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:44:19 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:44:19 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:44:19 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:44:19 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:44:19 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:44:19 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:44:19 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:44:19 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:44:19 - OpenVPN > open_tun . 2024.05.11 23:44:19 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:44:19 - Elevated: Command:wfp . 2024.05.11 23:44:19 - Elevated: Command:wfp . 2024.05.11 23:44:19 - Elevated: Command:wfp . 2024.05.11 23:44:19 - Above log line repeated 3 times more . 2024.05.11 23:44:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.7.10.90 255.255.255.0 . 2024.05.11 23:44:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:44:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:44:19 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:44:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:30a::1058/128 store=active . 2024.05.11 23:44:20 - OpenVPN > add_route_ipv6(fde6:7a:7d20:30a::/64 -> fde6:7a:7d20:30a::1058 metric 0) dev Local Area Connection . 2024.05.11 23:44:20 - Exec(6) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:44:20 - Exec(6) done in 79 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:44:20 - Interface List . 2024.05.11 23:44:20 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:44:20 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:44:20 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:44:20 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:44:20 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:44:20 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:44:20 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:44:20 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:44:20 - =========================================================================== . 2024.05.11 23:44:20 - IPv6 Route Table . 2024.05.11 23:44:20 - =========================================================================== . 2024.05.11 23:44:20 - Active Routes: . 2024.05.11 23:44:20 - If Metric Network Destination Gateway . 2024.05.11 23:44:20 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:44:20 - 1 331 ::1/128 On-link . 2024.05.11 23:44:20 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:44:20 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:44:20 - On-link . 2024.05.11 23:44:20 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:44:20 - On-link . 2024.05.11 23:44:20 - 20 261 fde6:7a:7d20:30a::/64 fe80::8 . 2024.05.11 23:44:20 - 20 261 fe80::/64 On-link . 2024.05.11 23:44:20 - 18 291 fe80::/64 On-link . 2024.05.11 23:44:20 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:44:20 - On-link . 2024.05.11 23:44:20 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:44:20 - On-link . 2024.05.11 23:44:20 - 1 331 ff00::/8 On-link . 2024.05.11 23:44:20 - 20 261 ff00::/8 On-link . 2024.05.11 23:44:20 - 18 291 ff00::/8 On-link . 2024.05.11 23:44:20 - =========================================================================== . 2024.05.11 23:44:20 - Persistent Routes: . 2024.05.11 23:44:20 - None' . 2024.05.11 23:44:20 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:30a::/64 20 fe80::8 store=active . 2024.05.11 23:44:20 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:44:20 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:44:20 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:44:20 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:44:20 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:44:20 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:20 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:44:20 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:20 - Elevated: Command:wfp . 2024.05.11 23:44:20 - Elevated: Command:wfp . 2024.05.11 23:44:20 - Elevated: Command:wfp . 2024.05.11 23:44:20 - Above log line repeated 3 times more . 2024.05.11 23:44:20 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:44:20 - Elevated: Command:route-list . 2024.05.11 23:44:21 - Elevated: Command:windows-dns . 2024.05.11 23:44:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.7.10.1 register=primary validate=no', exit:0 . 2024.05.11 23:44:21 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.7.10.1) . 2024.05.11 23:44:21 - Elevated: Command:windows-dns . 2024.05.11 23:44:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:30a::1 register=primary validate=no', exit:0 . 2024.05.11 23:44:21 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:30a::1) . 2024.05.11 23:44:21 - Elevated: Command:windows-dns . 2024.05.11 23:44:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.7.10.1 register=primary validate=no', exit:0 . 2024.05.11 23:44:21 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.7.10.1) . 2024.05.11 23:44:21 - Elevated: Command:windows-dns . 2024.05.11 23:44:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:30a::1 register=primary validate=no', exit:0 . 2024.05.11 23:44:21 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:30a::1) . 2024.05.11 23:44:22 - Elevated: Command:route-list . 2024.05.11 23:44:22 - Elevated: Command:route . 2024.05.11 23:44:22 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:22 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:23 - Elevated: Command:route-list . 2024.05.11 23:44:23 - Elevated: Command:route . 2024.05.11 23:44:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:23 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:23 - Elevated: Command:route-list . 2024.05.11 23:44:23 - Elevated: Command:route . 2024.05.11 23:44:24 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:24 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:24 - Elevated: Command:route-list . 2024.05.11 23:44:24 - Elevated: Command:route . 2024.05.11 23:44:24 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:24 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:25 - Elevated: Command:route-list . 2024.05.11 23:44:25 - Elevated: Command:route . 2024.05.11 23:44:25 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.186.173/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:25 - Routes, add 213.152.186.173/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:26 - Elevated: Command:route-list . 2024.05.11 23:44:26 - Elevated: Command:route . 2024.05.11 23:44:26 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:1337:2430:5879:14eb:6d99:c756/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:26 - Routes, add 2a00:1678:1337:2430:5879:14eb:6d99:c756/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:26 - Flushing DNS . 2024.05.11 23:44:26 - Elevated: Command:dns-flush . 2024.05.11 23:44:26 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:44:26 - NET . 2024.05.11 23:44:26 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:44:26 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:44:26 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:44:26 - Exec(7) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:44:26 - Exec(7) done in 62 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:44:26 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:44:26 - Checking route IPv4 . 2024.05.11 23:44:33 - Checking route (4° try) . 2024.05.11 23:44:37 - Checking route (5° try) E 2024.05.11 23:44:37 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:44:37 - Disconnecting . 2024.05.11 23:44:37 - Sending soft termination signal . 2024.05.11 23:44:37 - Elevated: Command:openvpn . 2024.05.11 23:44:41 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:44:42 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:44:42 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:30a::/64) . 2024.05.11 23:44:42 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:30a::/64 20 fe80::8 store=active . 2024.05.11 23:44:42 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:30a::1058 store=active . 2024.05.11 23:44:42 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.7.10.90 store=active . 2024.05.11 23:44:43 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:44:43 - Elevated: Command:route-list . 2024.05.11 23:44:43 - Elevated: Command:route . 2024.05.11 23:44:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:43 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:44 - Elevated: Command:route-list . 2024.05.11 23:44:44 - Elevated: Command:route . 2024.05.11 23:44:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:44 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:44 - Elevated: Command:route-list . 2024.05.11 23:44:45 - Elevated: Command:route . 2024.05.11 23:44:45 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:45 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:45 - Elevated: Command:route-list . 2024.05.11 23:44:45 - Elevated: Command:route . 2024.05.11 23:44:45 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:45 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:46 - Elevated: Command:route-list . 2024.05.11 23:44:46 - Elevated: Command:route . 2024.05.11 23:44:46 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.186.175/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:46 - Routes, delete 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:44:46 - Elevated: Command:route-list . 2024.05.11 23:44:47 - Elevated: Command:route . 2024.05.11 23:44:47 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.186.173/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:47 - Routes, delete 213.152.186.173/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:47 - Elevated: Command:route-list . 2024.05.11 23:44:47 - Elevated: Command:route . 2024.05.11 23:44:47 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:1337:2430:5879:14eb:6d99:c756/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:47 - Routes, delete 2a00:1678:1337:2430:5879:14eb:6d99:c756/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:48 - Elevated: Command:route-list . 2024.05.11 23:44:48 - Routes, delete 213.152.186.175/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:44:48 - Elevated: Command:windows-dns . 2024.05.11 23:44:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:48 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:44:48 - Elevated: Command:windows-dns . 2024.05.11 23:44:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:48 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:44:48 - Elevated: Command:windows-dns . 2024.05.11 23:44:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:48 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:44:48 - Elevated: Command:windows-dns . 2024.05.11 23:44:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:44:48 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:44:48 - Elevated: Command:wfp . 2024.05.11 23:44:48 - Elevated: Command:wfp . 2024.05.11 23:44:48 - Elevated: Command:wfp . 2024.05.11 23:44:48 - Above log line repeated 3 times more . 2024.05.11 23:44:48 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:44:49 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:44:49 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:49 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:44:49 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:49 - Elevated: Command:wfp . 2024.05.11 23:44:49 - Elevated: Command:wfp . 2024.05.11 23:44:49 - Elevated: Command:wfp . 2024.05.11 23:44:49 - Above log line repeated 9 times more . 2024.05.11 23:44:49 - Connection terminated. I 2024.05.11 23:44:52 - Checking authorization ... . 2024.05.11 23:44:53 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:44:53 - Connecting to Melnick (Netherlands, Alblasserdam) . 2024.05.11 23:44:53 - Elevated: Command:route-list . 2024.05.11 23:44:53 - Elevated: Command:route . 2024.05.11 23:44:53 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.165/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:53 - Routes, add 134.19.179.165/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:44:54 - Elevated: Command:route-list . 2024.05.11 23:44:54 - Routes, add 134.19.179.165/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:44:54 - Elevated: Command:wfp . 2024.05.11 23:44:54 - Elevated: Command:wfp . 2024.05.11 23:44:54 - Elevated: Command:wfp . 2024.05.11 23:44:54 - Above log line repeated 3 times more . 2024.05.11 23:44:54 - Elevated: Command:openvpn . 2024.05.11 23:44:54 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:44:54 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:44:54 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:44:54 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:44:54 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:44:54 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:44:54 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:44:54 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]134.19.179.165:443 . 2024.05.11 23:44:54 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:44:54 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:44:54 - OpenVPN > UDP link remote: [AF_INET]134.19.179.165:443 . 2024.05.11 23:44:54 - OpenVPN > TLS: Initial packet from [AF_INET]134.19.179.165:443, sid=8a4ad16b 50c8c7f0 . 2024.05.11 23:44:54 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:44:54 - OpenVPN > VERIFY KU OK . 2024.05.11 23:44:54 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:44:54 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:44:54 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:44:54 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Melnick, emailAddress=info@airvpn.org . 2024.05.11 23:44:54 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:44:54 - OpenVPN > [Melnick] Peer Connection Initiated with [AF_INET]134.19.179.165:443 . 2024.05.11 23:44:54 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.34.10.1,dhcp-option DNS6 fde6:7a:7d20:1e0a::1,tun-ipv6,route-gateway 10.34.10.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:1e0a::108b/64 fde6:7a:7d20:1e0a::1,ifconfig 10.34.10.141 255.255.255.0,peer-id 4,cipher AES-256-GCM' . 2024.05.11 23:44:54 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:44:54 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.34.10.1' . 2024.05.11 23:44:54 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:1e0a::1' . 2024.05.11 23:44:54 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:44:54 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:44:54 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:44:54 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:44:54 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:44:54 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:44:54 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:44:54 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:44:54 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:44:54 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:44:54 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:44:54 - OpenVPN > open_tun . 2024.05.11 23:44:54 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:44:55 - Elevated: Command:wfp . 2024.05.11 23:44:55 - Elevated: Command:wfp . 2024.05.11 23:44:55 - Elevated: Command:wfp . 2024.05.11 23:44:55 - Above log line repeated 3 times more . 2024.05.11 23:44:55 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.34.10.141 255.255.255.0 . 2024.05.11 23:44:55 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:44:55 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:44:55 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:44:55 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:1e0a::108b/128 store=active . 2024.05.11 23:44:55 - OpenVPN > add_route_ipv6(fde6:7a:7d20:1e0a::/64 -> fde6:7a:7d20:1e0a::108b metric 0) dev Local Area Connection . 2024.05.11 23:44:55 - Exec(8) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:44:55 - Exec(8) done in 94 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:44:55 - Interface List . 2024.05.11 23:44:55 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:44:55 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:44:55 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:44:55 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:44:55 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:44:55 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:44:55 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:44:55 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:44:55 - =========================================================================== . 2024.05.11 23:44:55 - IPv6 Route Table . 2024.05.11 23:44:55 - =========================================================================== . 2024.05.11 23:44:55 - Active Routes: . 2024.05.11 23:44:55 - If Metric Network Destination Gateway . 2024.05.11 23:44:55 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:44:55 - 1 331 ::1/128 On-link . 2024.05.11 23:44:55 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:44:55 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:44:55 - On-link . 2024.05.11 23:44:55 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:44:55 - On-link . 2024.05.11 23:44:55 - 20 261 fde6:7a:7d20:1e0a::/64 fe80::8 . 2024.05.11 23:44:55 - 20 261 fe80::/64 On-link . 2024.05.11 23:44:55 - 18 291 fe80::/64 On-link . 2024.05.11 23:44:55 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:44:55 - On-link . 2024.05.11 23:44:55 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:44:55 - On-link . 2024.05.11 23:44:55 - 1 331 ff00::/8 On-link . 2024.05.11 23:44:55 - 20 261 ff00::/8 On-link . 2024.05.11 23:44:55 - 18 291 ff00::/8 On-link . 2024.05.11 23:44:55 - =========================================================================== . 2024.05.11 23:44:55 - Persistent Routes: . 2024.05.11 23:44:55 - None' . 2024.05.11 23:44:55 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:1e0a::/64 20 fe80::8 store=active . 2024.05.11 23:44:55 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:44:55 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:44:55 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:44:55 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:44:56 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:44:56 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:56 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:44:56 - Elevated: Command:set-interface-metric . 2024.05.11 23:44:56 - Elevated: Command:wfp . 2024.05.11 23:44:56 - Elevated: Command:wfp . 2024.05.11 23:44:56 - Elevated: Command:wfp . 2024.05.11 23:44:56 - Above log line repeated 3 times more . 2024.05.11 23:44:56 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:44:56 - Elevated: Command:route-list . 2024.05.11 23:44:56 - Elevated: Command:windows-dns . 2024.05.11 23:44:56 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.34.10.1 register=primary validate=no', exit:0 . 2024.05.11 23:44:56 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.34.10.1) . 2024.05.11 23:44:56 - Elevated: Command:windows-dns . 2024.05.11 23:44:56 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:1e0a::1 register=primary validate=no', exit:0 . 2024.05.11 23:44:56 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:1e0a::1) . 2024.05.11 23:44:56 - Elevated: Command:windows-dns . 2024.05.11 23:44:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.34.10.1 register=primary validate=no', exit:0 . 2024.05.11 23:44:57 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.34.10.1) . 2024.05.11 23:44:57 - Elevated: Command:windows-dns . 2024.05.11 23:44:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:1e0a::1 register=primary validate=no', exit:0 . 2024.05.11 23:44:57 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:1e0a::1) . 2024.05.11 23:44:57 - Elevated: Command:route-list . 2024.05.11 23:44:57 - Elevated: Command:route . 2024.05.11 23:44:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:57 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:58 - Elevated: Command:route-list . 2024.05.11 23:44:58 - Elevated: Command:route . 2024.05.11 23:44:58 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:58 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:59 - Elevated: Command:route-list . 2024.05.11 23:44:59 - Elevated: Command:route . 2024.05.11 23:44:59 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:44:59 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:44:59 - Elevated: Command:route-list . 2024.05.11 23:44:59 - Elevated: Command:route . 2024.05.11 23:45:00 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:00 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:00 - Elevated: Command:route-list . 2024.05.11 23:45:00 - Elevated: Command:route . 2024.05.11 23:45:01 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.163/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:01 - Routes, add 134.19.179.163/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:01 - Elevated: Command:route-list . 2024.05.11 23:45:01 - Elevated: Command:route . 2024.05.11 23:45:01 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:eeee:2259:2a8b:386:4b98/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:01 - Routes, add 2a00:1678:2470:eeee:2259:2a8b:386:4b98/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:01 - Flushing DNS . 2024.05.11 23:45:01 - Elevated: Command:dns-flush . 2024.05.11 23:45:01 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:45:01 - NET . 2024.05.11 23:45:01 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:45:01 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:45:01 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:45:01 - Exec(9) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:45:02 - Exec(9) done in 94 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:45:02 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:45:02 - Checking route IPv4 . 2024.05.11 23:45:08 - Checking route (4° try) . 2024.05.11 23:45:12 - Checking route (5° try) E 2024.05.11 23:45:13 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:45:13 - Disconnecting . 2024.05.11 23:45:13 - Sending soft termination signal . 2024.05.11 23:45:13 - Elevated: Command:openvpn . 2024.05.11 23:45:16 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:45:17 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:45:17 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:1e0a::/64) . 2024.05.11 23:45:17 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:1e0a::/64 20 fe80::8 store=active . 2024.05.11 23:45:17 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:1e0a::108b store=active . 2024.05.11 23:45:18 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.34.10.141 store=active . 2024.05.11 23:45:18 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:45:18 - Elevated: Command:route-list . 2024.05.11 23:45:18 - Elevated: Command:route . 2024.05.11 23:45:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:18 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:19 - Elevated: Command:route-list . 2024.05.11 23:45:19 - Elevated: Command:route . 2024.05.11 23:45:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:19 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:20 - Elevated: Command:route-list . 2024.05.11 23:45:20 - Elevated: Command:route . 2024.05.11 23:45:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:20 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:20 - Elevated: Command:route-list . 2024.05.11 23:45:20 - Elevated: Command:route . 2024.05.11 23:45:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:21 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:21 - Elevated: Command:route-list . 2024.05.11 23:45:21 - Elevated: Command:route . 2024.05.11 23:45:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.165/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:21 - Routes, delete 134.19.179.165/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:45:22 - Elevated: Command:route-list . 2024.05.11 23:45:22 - Elevated: Command:route . 2024.05.11 23:45:22 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.163/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:22 - Routes, delete 134.19.179.163/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:22 - Elevated: Command:route-list . 2024.05.11 23:45:22 - Elevated: Command:route . 2024.05.11 23:45:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:eeee:2259:2a8b:386:4b98/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:23 - Routes, delete 2a00:1678:2470:eeee:2259:2a8b:386:4b98/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:23 - Elevated: Command:route-list . 2024.05.11 23:45:23 - Routes, delete 134.19.179.165/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:45:23 - Elevated: Command:windows-dns . 2024.05.11 23:45:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:23 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:45:23 - Elevated: Command:windows-dns . 2024.05.11 23:45:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:23 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:45:23 - Elevated: Command:windows-dns . 2024.05.11 23:45:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:23 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:45:23 - Elevated: Command:windows-dns . 2024.05.11 23:45:24 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:24 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:45:24 - Elevated: Command:wfp . 2024.05.11 23:45:24 - Elevated: Command:wfp . 2024.05.11 23:45:24 - Elevated: Command:wfp . 2024.05.11 23:45:24 - Above log line repeated 3 times more . 2024.05.11 23:45:24 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:45:24 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:45:24 - Elevated: Command:set-interface-metric . 2024.05.11 23:45:24 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:45:24 - Elevated: Command:set-interface-metric . 2024.05.11 23:45:24 - Elevated: Command:wfp . 2024.05.11 23:45:24 - Elevated: Command:wfp . 2024.05.11 23:45:24 - Elevated: Command:wfp . 2024.05.11 23:45:24 - Above log line repeated 9 times more . 2024.05.11 23:45:24 - Connection terminated. I 2024.05.11 23:45:27 - Checking authorization ... . 2024.05.11 23:45:28 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:45:28 - Connecting to Kajam (Netherlands, Alblasserdam) . 2024.05.11 23:45:28 - Elevated: Command:route-list . 2024.05.11 23:45:28 - Elevated: Command:route . 2024.05.11 23:45:29 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.87/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:29 - Routes, add 213.152.161.87/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:45:29 - Elevated: Command:route-list . 2024.05.11 23:45:29 - Routes, add 213.152.161.87/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:45:29 - Elevated: Command:wfp . 2024.05.11 23:45:29 - Elevated: Command:wfp . 2024.05.11 23:45:29 - Elevated: Command:wfp . 2024.05.11 23:45:29 - Above log line repeated 3 times more . 2024.05.11 23:45:29 - Elevated: Command:openvpn . 2024.05.11 23:45:29 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:45:29 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:45:29 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:45:29 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:45:29 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:45:29 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:45:29 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:45:29 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.87:443 . 2024.05.11 23:45:29 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:45:29 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:45:29 - OpenVPN > UDP link remote: [AF_INET]213.152.161.87:443 . 2024.05.11 23:45:29 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.87:443, sid=79b89d91 7ac0b236 . 2024.05.11 23:45:29 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:45:29 - OpenVPN > VERIFY KU OK . 2024.05.11 23:45:29 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:45:29 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:45:29 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:45:29 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Kajam, emailAddress=info@airvpn.org . 2024.05.11 23:45:29 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:45:29 - OpenVPN > [Kajam] Peer Connection Initiated with [AF_INET]213.152.161.87:443 . 2024.05.11 23:45:29 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.19.234.1,dhcp-option DNS6 fde6:7a:7d20:fea::1,tun-ipv6,route-gateway 10.19.234.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:fea::10f4/64 fde6:7a:7d20:fea::1,ifconfig 10.19.234.246 255.255.255.0,peer-id 1,cipher AES-256-GCM' . 2024.05.11 23:45:29 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:45:29 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.19.234.1' . 2024.05.11 23:45:29 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:fea::1' . 2024.05.11 23:45:29 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:45:29 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:45:30 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:45:30 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:45:30 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:45:30 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:45:30 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:45:30 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:45:30 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:45:30 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:45:30 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:45:30 - OpenVPN > open_tun . 2024.05.11 23:45:30 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:45:30 - Elevated: Command:wfp . 2024.05.11 23:45:30 - Elevated: Command:wfp . 2024.05.11 23:45:30 - Elevated: Command:wfp . 2024.05.11 23:45:30 - Above log line repeated 3 times more . 2024.05.11 23:45:30 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.19.234.246 255.255.255.0 . 2024.05.11 23:45:30 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:45:30 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:45:30 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:45:30 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:fea::10f4/128 store=active . 2024.05.11 23:45:30 - OpenVPN > add_route_ipv6(fde6:7a:7d20:fea::/64 -> fde6:7a:7d20:fea::10f4 metric 0) dev Local Area Connection . 2024.05.11 23:45:30 - Exec(10) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:45:30 - Exec(10) done in 93 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:45:30 - Interface List . 2024.05.11 23:45:30 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:45:30 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:45:30 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:45:30 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:45:30 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:45:30 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:45:30 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:45:30 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:45:30 - =========================================================================== . 2024.05.11 23:45:30 - IPv6 Route Table . 2024.05.11 23:45:30 - =========================================================================== . 2024.05.11 23:45:30 - Active Routes: . 2024.05.11 23:45:30 - If Metric Network Destination Gateway . 2024.05.11 23:45:30 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:45:30 - 1 331 ::1/128 On-link . 2024.05.11 23:45:30 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:45:30 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:45:30 - On-link . 2024.05.11 23:45:30 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:45:30 - On-link . 2024.05.11 23:45:30 - 20 261 fe80::/64 On-link . 2024.05.11 23:45:30 - 18 291 fe80::/64 On-link . 2024.05.11 23:45:30 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:45:30 - On-link . 2024.05.11 23:45:30 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:45:30 - On-link . 2024.05.11 23:45:30 - 1 331 ff00::/8 On-link . 2024.05.11 23:45:30 - 20 261 ff00::/8 On-link . 2024.05.11 23:45:30 - 18 291 ff00::/8 On-link . 2024.05.11 23:45:30 - =========================================================================== . 2024.05.11 23:45:30 - Persistent Routes: . 2024.05.11 23:45:30 - None' . 2024.05.11 23:45:30 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:fea::/64 20 fe80::8 store=active . 2024.05.11 23:45:30 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:45:31 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:45:31 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:45:31 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:45:31 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:45:31 - Elevated: Command:set-interface-metric . 2024.05.11 23:45:31 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:45:31 - Elevated: Command:set-interface-metric . 2024.05.11 23:45:31 - Elevated: Command:wfp . 2024.05.11 23:45:31 - Elevated: Command:wfp . 2024.05.11 23:45:31 - Elevated: Command:wfp . 2024.05.11 23:45:31 - Above log line repeated 3 times more . 2024.05.11 23:45:31 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:45:31 - Elevated: Command:route-list . 2024.05.11 23:45:31 - Elevated: Command:windows-dns . 2024.05.11 23:45:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.19.234.1 register=primary validate=no', exit:0 . 2024.05.11 23:45:31 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.19.234.1) . 2024.05.11 23:45:31 - Elevated: Command:windows-dns . 2024.05.11 23:45:32 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:fea::1 register=primary validate=no', exit:0 . 2024.05.11 23:45:32 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:fea::1) . 2024.05.11 23:45:32 - Elevated: Command:windows-dns . 2024.05.11 23:45:32 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.19.234.1 register=primary validate=no', exit:0 . 2024.05.11 23:45:32 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.19.234.1) . 2024.05.11 23:45:32 - Elevated: Command:windows-dns . 2024.05.11 23:45:32 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:fea::1 register=primary validate=no', exit:0 . 2024.05.11 23:45:32 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:fea::1) . 2024.05.11 23:45:32 - Elevated: Command:route-list . 2024.05.11 23:45:32 - Elevated: Command:route . 2024.05.11 23:45:33 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:33 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:33 - Elevated: Command:route-list . 2024.05.11 23:45:33 - Elevated: Command:route . 2024.05.11 23:45:33 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:33 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:34 - Elevated: Command:route-list . 2024.05.11 23:45:34 - Elevated: Command:route . 2024.05.11 23:45:34 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:34 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:35 - Elevated: Command:route-list . 2024.05.11 23:45:35 - Elevated: Command:route . 2024.05.11 23:45:35 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:35 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:35 - Elevated: Command:route-list . 2024.05.11 23:45:36 - Elevated: Command:route . 2024.05.11 23:45:36 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.85/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:36 - Routes, add 213.152.161.85/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:36 - Elevated: Command:route-list . 2024.05.11 23:45:37 - Elevated: Command:route . 2024.05.11 23:45:37 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:17:ce9d:9d0a:18e5:d26e/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:37 - Routes, add 2a00:1678:2470:17:ce9d:9d0a:18e5:d26e/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:37 - Flushing DNS . 2024.05.11 23:45:37 - Elevated: Command:dns-flush . 2024.05.11 23:45:37 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:45:37 - NET . 2024.05.11 23:45:37 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:45:37 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:45:37 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:45:37 - Exec(11) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:45:37 - Exec(11) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:45:37 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:45:37 - Checking route IPv4 . 2024.05.11 23:45:44 - Checking route (4° try) . 2024.05.11 23:45:48 - Checking route (5° try) E 2024.05.11 23:45:48 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:45:48 - Disconnecting . 2024.05.11 23:45:48 - Sending soft termination signal . 2024.05.11 23:45:48 - Elevated: Command:openvpn . 2024.05.11 23:45:51 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:45:53 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:45:53 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:fea::/64) . 2024.05.11 23:45:53 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:fea::/64 20 fe80::8 store=active . 2024.05.11 23:45:53 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:fea::10f4 store=active . 2024.05.11 23:45:53 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.19.234.246 store=active . 2024.05.11 23:45:53 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:45:54 - Elevated: Command:route-list . 2024.05.11 23:45:54 - Elevated: Command:route . 2024.05.11 23:45:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:54 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:55 - Elevated: Command:route-list . 2024.05.11 23:45:55 - Elevated: Command:route . 2024.05.11 23:45:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:55 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:55 - Elevated: Command:route-list . 2024.05.11 23:45:55 - Elevated: Command:route . 2024.05.11 23:45:56 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:56 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:56 - Elevated: Command:route-list . 2024.05.11 23:45:56 - Elevated: Command:route . 2024.05.11 23:45:56 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:56 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:57 - Elevated: Command:route-list . 2024.05.11 23:45:57 - Elevated: Command:route . 2024.05.11 23:45:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.87/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:57 - Routes, delete 213.152.161.87/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:45:57 - Elevated: Command:route-list . 2024.05.11 23:45:58 - Elevated: Command:route . 2024.05.11 23:45:58 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.85/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:58 - Routes, delete 213.152.161.85/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:58 - Elevated: Command:route-list . 2024.05.11 23:45:58 - Elevated: Command:route . 2024.05.11 23:45:58 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:17:ce9d:9d0a:18e5:d26e/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:45:58 - Routes, delete 2a00:1678:2470:17:ce9d:9d0a:18e5:d26e/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:45:59 - Elevated: Command:route-list . 2024.05.11 23:45:59 - Routes, delete 213.152.161.87/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:45:59 - Elevated: Command:windows-dns . 2024.05.11 23:45:59 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:59 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:45:59 - Elevated: Command:windows-dns . 2024.05.11 23:45:59 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:59 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:45:59 - Elevated: Command:windows-dns . 2024.05.11 23:45:59 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:59 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:45:59 - Elevated: Command:windows-dns . 2024.05.11 23:45:59 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:45:59 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:45:59 - Elevated: Command:wfp . 2024.05.11 23:45:59 - Elevated: Command:wfp . 2024.05.11 23:45:59 - Elevated: Command:wfp . 2024.05.11 23:45:59 - Above log line repeated 3 times more . 2024.05.11 23:45:59 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:46:00 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:46:00 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:00 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:46:00 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:00 - Elevated: Command:wfp . 2024.05.11 23:46:00 - Elevated: Command:wfp . 2024.05.11 23:46:00 - Elevated: Command:wfp . 2024.05.11 23:46:00 - Above log line repeated 9 times more . 2024.05.11 23:46:00 - Connection terminated. I 2024.05.11 23:46:03 - Checking authorization ... . 2024.05.11 23:46:04 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:46:04 - Connecting to Alrai (Netherlands, Alblasserdam) . 2024.05.11 23:46:05 - Elevated: Command:route-list . 2024.05.11 23:46:05 - Elevated: Command:route . 2024.05.11 23:46:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.81/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:05 - Routes, add 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:46:06 - Elevated: Command:route-list . 2024.05.11 23:46:06 - Routes, add 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:46:06 - Elevated: Command:wfp . 2024.05.11 23:46:06 - Elevated: Command:wfp . 2024.05.11 23:46:06 - Elevated: Command:wfp . 2024.05.11 23:46:06 - Above log line repeated 3 times more . 2024.05.11 23:46:06 - Elevated: Command:openvpn . 2024.05.11 23:46:06 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:46:06 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:46:06 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:46:06 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:46:06 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:46:06 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:46:06 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:46:06 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.162.81:443 . 2024.05.11 23:46:06 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:46:06 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:46:06 - OpenVPN > UDP link remote: [AF_INET]213.152.162.81:443 . 2024.05.11 23:46:06 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.162.81:443, sid=1db2921a 70d9d74b . 2024.05.11 23:46:06 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:46:06 - OpenVPN > VERIFY KU OK . 2024.05.11 23:46:06 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:46:06 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:46:06 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:46:06 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Alrai, emailAddress=info@airvpn.org . 2024.05.11 23:46:06 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:46:06 - OpenVPN > [Alrai] Peer Connection Initiated with [AF_INET]213.152.162.81:443 . 2024.05.11 23:46:06 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.7.138.1,dhcp-option DNS6 fde6:7a:7d20:38a::1,tun-ipv6,route-gateway 10.7.138.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:38a::107a/64 fde6:7a:7d20:38a::1,ifconfig 10.7.138.124 255.255.255.0,peer-id 1,cipher AES-256-GCM' . 2024.05.11 23:46:06 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:46:06 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.7.138.1' . 2024.05.11 23:46:06 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:38a::1' . 2024.05.11 23:46:06 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:46:06 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:46:06 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:46:06 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:46:06 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:46:06 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:46:06 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:46:06 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:46:06 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:46:06 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:46:06 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:46:06 - OpenVPN > open_tun . 2024.05.11 23:46:06 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:46:06 - Elevated: Command:wfp . 2024.05.11 23:46:06 - Elevated: Command:wfp . 2024.05.11 23:46:06 - Elevated: Command:wfp . 2024.05.11 23:46:07 - Above log line repeated 3 times more . 2024.05.11 23:46:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.7.138.124 255.255.255.0 . 2024.05.11 23:46:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:46:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:46:07 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:46:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:38a::107a/128 store=active . 2024.05.11 23:46:07 - OpenVPN > add_route_ipv6(fde6:7a:7d20:38a::/64 -> fde6:7a:7d20:38a::107a metric 0) dev Local Area Connection . 2024.05.11 23:46:07 - Exec(12) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:46:07 - Exec(12) done in 94 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:46:07 - Interface List . 2024.05.11 23:46:07 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:46:07 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:46:07 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:46:07 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:46:07 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:46:07 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:46:07 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:46:07 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:46:07 - =========================================================================== . 2024.05.11 23:46:07 - IPv6 Route Table . 2024.05.11 23:46:07 - =========================================================================== . 2024.05.11 23:46:07 - Active Routes: . 2024.05.11 23:46:07 - If Metric Network Destination Gateway . 2024.05.11 23:46:07 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:46:07 - 1 331 ::1/128 On-link . 2024.05.11 23:46:07 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:46:07 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:46:07 - On-link . 2024.05.11 23:46:07 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:46:07 - On-link . 2024.05.11 23:46:07 - 20 261 fde6:7a:7d20:38a::/64 fe80::8 . 2024.05.11 23:46:07 - 20 261 fe80::/64 On-link . 2024.05.11 23:46:07 - 18 291 fe80::/64 On-link . 2024.05.11 23:46:07 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:46:07 - On-link . 2024.05.11 23:46:07 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:46:07 - On-link . 2024.05.11 23:46:07 - 1 331 ff00::/8 On-link . 2024.05.11 23:46:07 - 20 261 ff00::/8 On-link . 2024.05.11 23:46:07 - 18 291 ff00::/8 On-link . 2024.05.11 23:46:07 - =========================================================================== . 2024.05.11 23:46:07 - Persistent Routes: . 2024.05.11 23:46:07 - None' . 2024.05.11 23:46:07 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:38a::/64 20 fe80::8 store=active . 2024.05.11 23:46:07 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:46:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:46:07 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:46:07 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:46:07 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:46:07 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:07 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:46:07 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:07 - Elevated: Command:wfp . 2024.05.11 23:46:07 - Elevated: Command:wfp . 2024.05.11 23:46:07 - Elevated: Command:wfp . 2024.05.11 23:46:08 - Above log line repeated 3 times more . 2024.05.11 23:46:08 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:46:08 - Elevated: Command:route-list . 2024.05.11 23:46:08 - Elevated: Command:windows-dns . 2024.05.11 23:46:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.7.138.1 register=primary validate=no', exit:0 . 2024.05.11 23:46:08 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.7.138.1) . 2024.05.11 23:46:08 - Elevated: Command:windows-dns . 2024.05.11 23:46:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:38a::1 register=primary validate=no', exit:0 . 2024.05.11 23:46:09 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:38a::1) . 2024.05.11 23:46:09 - Elevated: Command:windows-dns . 2024.05.11 23:46:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.7.138.1 register=primary validate=no', exit:0 . 2024.05.11 23:46:09 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.7.138.1) . 2024.05.11 23:46:09 - Elevated: Command:windows-dns . 2024.05.11 23:46:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:38a::1 register=primary validate=no', exit:0 . 2024.05.11 23:46:09 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:38a::1) . 2024.05.11 23:46:09 - Elevated: Command:route-list . 2024.05.11 23:46:09 - Elevated: Command:route . 2024.05.11 23:46:10 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:10 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:10 - Elevated: Command:route-list . 2024.05.11 23:46:10 - Elevated: Command:route . 2024.05.11 23:46:10 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:10 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:11 - Elevated: Command:route-list . 2024.05.11 23:46:11 - Elevated: Command:route . 2024.05.11 23:46:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:11 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:12 - Elevated: Command:route-list . 2024.05.11 23:46:12 - Elevated: Command:route . 2024.05.11 23:46:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:12 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:12 - Elevated: Command:route-list . 2024.05.11 23:46:13 - Elevated: Command:route . 2024.05.11 23:46:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.79/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:13 - Routes, add 213.152.162.79/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:14 - Elevated: Command:route-list . 2024.05.11 23:46:14 - Elevated: Command:route . 2024.05.11 23:46:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:29:26cb:b8f1:4b1:2636/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:14 - Routes, add 2a00:1678:2470:29:26cb:b8f1:4b1:2636/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:14 - Flushing DNS . 2024.05.11 23:46:14 - Elevated: Command:dns-flush . 2024.05.11 23:46:15 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:46:15 - NET . 2024.05.11 23:46:15 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:46:15 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:46:15 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:46:15 - Exec(13) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:46:15 - Exec(13) done in 203 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:46:15 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:46:15 - Checking route IPv4 . 2024.05.11 23:46:22 - Checking route (4° try) . 2024.05.11 23:46:26 - Checking route (5° try) E 2024.05.11 23:46:26 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:46:26 - Disconnecting . 2024.05.11 23:46:26 - Sending soft termination signal . 2024.05.11 23:46:26 - Elevated: Command:openvpn . 2024.05.11 23:46:29 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:46:31 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:46:31 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:38a::/64) . 2024.05.11 23:46:31 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:38a::/64 20 fe80::8 store=active . 2024.05.11 23:46:31 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:38a::107a store=active . 2024.05.11 23:46:31 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.7.138.124 store=active . 2024.05.11 23:46:31 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:46:32 - Elevated: Command:route-list . 2024.05.11 23:46:32 - Elevated: Command:route . 2024.05.11 23:46:32 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:32 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:33 - Elevated: Command:route-list . 2024.05.11 23:46:33 - Elevated: Command:route . 2024.05.11 23:46:33 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:33 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:33 - Elevated: Command:route-list . 2024.05.11 23:46:33 - Elevated: Command:route . 2024.05.11 23:46:34 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:34 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:34 - Elevated: Command:route-list . 2024.05.11 23:46:34 - Elevated: Command:route . 2024.05.11 23:46:34 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:34 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:35 - Elevated: Command:route-list . 2024.05.11 23:46:35 - Elevated: Command:route . 2024.05.11 23:46:35 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.81/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:35 - Routes, delete 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:46:35 - Elevated: Command:route-list . 2024.05.11 23:46:35 - Elevated: Command:route . 2024.05.11 23:46:36 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.79/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:36 - Routes, delete 213.152.162.79/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:36 - Elevated: Command:route-list . 2024.05.11 23:46:36 - Elevated: Command:route . 2024.05.11 23:46:36 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:29:26cb:b8f1:4b1:2636/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:36 - Routes, delete 2a00:1678:2470:29:26cb:b8f1:4b1:2636/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:37 - Elevated: Command:route-list . 2024.05.11 23:46:37 - Routes, delete 213.152.162.81/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:46:37 - Elevated: Command:windows-dns . 2024.05.11 23:46:37 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:46:37 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:46:37 - Elevated: Command:windows-dns . 2024.05.11 23:46:37 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:46:37 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:46:37 - Elevated: Command:windows-dns . 2024.05.11 23:46:37 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:46:37 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:46:37 - Elevated: Command:windows-dns . 2024.05.11 23:46:37 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:46:37 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:46:37 - Elevated: Command:wfp . 2024.05.11 23:46:37 - Elevated: Command:wfp . 2024.05.11 23:46:37 - Elevated: Command:wfp . 2024.05.11 23:46:37 - Above log line repeated 3 times more . 2024.05.11 23:46:37 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:46:38 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:46:38 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:38 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:46:38 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:38 - Elevated: Command:wfp . 2024.05.11 23:46:38 - Elevated: Command:wfp . 2024.05.11 23:46:38 - Elevated: Command:wfp . 2024.05.11 23:46:38 - Above log line repeated 9 times more . 2024.05.11 23:46:38 - Connection terminated. I 2024.05.11 23:46:41 - Checking authorization ... . 2024.05.11 23:46:42 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:46:42 - Connecting to Tarazed (Netherlands, Alblasserdam) . 2024.05.11 23:46:42 - Elevated: Command:route-list . 2024.05.11 23:46:42 - Elevated: Command:route . 2024.05.11 23:46:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.135/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:42 - Routes, add 213.152.161.135/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:46:43 - Elevated: Command:route-list . 2024.05.11 23:46:43 - Routes, add 213.152.161.135/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:46:43 - Elevated: Command:wfp . 2024.05.11 23:46:43 - Elevated: Command:wfp . 2024.05.11 23:46:43 - Elevated: Command:wfp . 2024.05.11 23:46:43 - Above log line repeated 3 times more . 2024.05.11 23:46:43 - Elevated: Command:openvpn . 2024.05.11 23:46:43 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:46:43 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:46:43 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:46:43 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:46:43 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:46:43 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:46:43 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:46:43 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.135:443 . 2024.05.11 23:46:43 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:46:43 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:46:43 - OpenVPN > UDP link remote: [AF_INET]213.152.161.135:443 . 2024.05.11 23:46:43 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.135:443, sid=b4692a35 884a5321 . 2024.05.11 23:46:43 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:46:43 - OpenVPN > VERIFY KU OK . 2024.05.11 23:46:43 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:46:43 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:46:43 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:46:43 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Tarazed, emailAddress=info@airvpn.org . 2024.05.11 23:46:43 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:46:43 - OpenVPN > [Tarazed] Peer Connection Initiated with [AF_INET]213.152.161.135:443 . 2024.05.11 23:46:43 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.31.42.1,dhcp-option DNS6 fde6:7a:7d20:1b2a::1,tun-ipv6,route-gateway 10.31.42.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:1b2a::10df/64 fde6:7a:7d20:1b2a::1,ifconfig 10.31.42.225 255.255.255.0,peer-id 1,cipher AES-256-GCM' . 2024.05.11 23:46:43 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:46:43 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.31.42.1' . 2024.05.11 23:46:43 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:1b2a::1' . 2024.05.11 23:46:43 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:46:43 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:46:43 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:46:43 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:46:43 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:46:43 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:46:43 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:46:43 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:46:43 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:46:43 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:46:43 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:46:43 - OpenVPN > open_tun . 2024.05.11 23:46:43 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:46:44 - Elevated: Command:wfp . 2024.05.11 23:46:44 - Elevated: Command:wfp . 2024.05.11 23:46:44 - Elevated: Command:wfp . 2024.05.11 23:46:44 - Above log line repeated 3 times more . 2024.05.11 23:46:44 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.31.42.225 255.255.255.0 . 2024.05.11 23:46:44 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:46:44 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:46:44 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:46:44 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:1b2a::10df/128 store=active . 2024.05.11 23:46:44 - OpenVPN > add_route_ipv6(fde6:7a:7d20:1b2a::/64 -> fde6:7a:7d20:1b2a::10df metric 0) dev Local Area Connection . 2024.05.11 23:46:44 - Exec(14) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:46:44 - Exec(14) done in 141 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:46:44 - Interface List . 2024.05.11 23:46:44 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:46:44 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:46:44 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:46:44 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:46:44 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:46:44 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:46:44 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:46:44 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:46:44 - =========================================================================== . 2024.05.11 23:46:44 - IPv6 Route Table . 2024.05.11 23:46:44 - =========================================================================== . 2024.05.11 23:46:44 - Active Routes: . 2024.05.11 23:46:44 - If Metric Network Destination Gateway . 2024.05.11 23:46:44 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:46:44 - 1 331 ::1/128 On-link . 2024.05.11 23:46:44 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:46:44 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:46:44 - On-link . 2024.05.11 23:46:44 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:46:44 - On-link . 2024.05.11 23:46:44 - 20 261 fe80::/64 On-link . 2024.05.11 23:46:44 - 18 291 fe80::/64 On-link . 2024.05.11 23:46:44 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:46:44 - On-link . 2024.05.11 23:46:44 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:46:44 - On-link . 2024.05.11 23:46:44 - 1 331 ff00::/8 On-link . 2024.05.11 23:46:44 - 20 261 ff00::/8 On-link . 2024.05.11 23:46:44 - 18 291 ff00::/8 On-link . 2024.05.11 23:46:44 - =========================================================================== . 2024.05.11 23:46:44 - Persistent Routes: . 2024.05.11 23:46:44 - None' . 2024.05.11 23:46:44 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:1b2a::/64 20 fe80::8 store=active . 2024.05.11 23:46:44 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:46:44 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:46:44 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:46:44 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:46:44 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:46:44 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:44 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:46:44 - Elevated: Command:set-interface-metric . 2024.05.11 23:46:44 - Elevated: Command:wfp . 2024.05.11 23:46:44 - Elevated: Command:wfp . 2024.05.11 23:46:44 - Elevated: Command:wfp . 2024.05.11 23:46:45 - Above log line repeated 3 times more . 2024.05.11 23:46:45 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:46:45 - Elevated: Command:route-list . 2024.05.11 23:46:45 - Elevated: Command:windows-dns . 2024.05.11 23:46:45 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.31.42.1 register=primary validate=no', exit:0 . 2024.05.11 23:46:45 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.31.42.1) . 2024.05.11 23:46:45 - Elevated: Command:windows-dns . 2024.05.11 23:46:45 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:1b2a::1 register=primary validate=no', exit:0 . 2024.05.11 23:46:45 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:1b2a::1) . 2024.05.11 23:46:45 - Elevated: Command:windows-dns . 2024.05.11 23:46:45 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.31.42.1 register=primary validate=no', exit:0 . 2024.05.11 23:46:45 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.31.42.1) . 2024.05.11 23:46:45 - Elevated: Command:windows-dns . 2024.05.11 23:46:46 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:1b2a::1 register=primary validate=no', exit:0 . 2024.05.11 23:46:46 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:1b2a::1) . 2024.05.11 23:46:46 - Elevated: Command:route-list . 2024.05.11 23:46:46 - Elevated: Command:route . 2024.05.11 23:46:46 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:46 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:47 - Elevated: Command:route-list . 2024.05.11 23:46:47 - Elevated: Command:route . 2024.05.11 23:46:47 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:47 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:47 - Elevated: Command:route-list . 2024.05.11 23:46:48 - Elevated: Command:route . 2024.05.11 23:46:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:48 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:48 - Elevated: Command:route-list . 2024.05.11 23:46:48 - Elevated: Command:route . 2024.05.11 23:46:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:48 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:49 - Elevated: Command:route-list . 2024.05.11 23:46:49 - Elevated: Command:route . 2024.05.11 23:46:49 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.133/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:49 - Routes, add 213.152.161.133/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:50 - Elevated: Command:route-list . 2024.05.11 23:46:50 - Elevated: Command:route . 2024.05.11 23:46:50 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:4:6cea:a07e:e6f3:db56/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:46:50 - Routes, add 2a00:1678:2470:4:6cea:a07e:e6f3:db56/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:46:50 - Flushing DNS . 2024.05.11 23:46:50 - Elevated: Command:dns-flush . 2024.05.11 23:46:50 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:46:50 - NET . 2024.05.11 23:46:50 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:46:50 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:46:50 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:46:50 - Exec(15) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:46:50 - Exec(15) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:46:50 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:46:50 - Checking route IPv4 . 2024.05.11 23:46:54 - Elevated: Command:service-conn-mode . 2024.05.11 23:46:57 - Checking route (4° try) . 2024.05.11 23:47:01 - Checking route (5° try) E 2024.05.11 23:47:01 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:47:01 - Disconnecting . 2024.05.11 23:47:01 - Sending soft termination signal . 2024.05.11 23:47:01 - Elevated: Command:openvpn . 2024.05.11 23:47:04 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:47:06 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:47:06 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:1b2a::/64) . 2024.05.11 23:47:06 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:1b2a::/64 20 fe80::8 store=active . 2024.05.11 23:47:06 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:1b2a::10df store=active . 2024.05.11 23:47:06 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.31.42.225 store=active . 2024.05.11 23:47:06 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:47:07 - Elevated: Command:route-list . 2024.05.11 23:47:07 - Elevated: Command:route . 2024.05.11 23:47:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:07 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:07 - Elevated: Command:route-list . 2024.05.11 23:47:08 - Elevated: Command:route . 2024.05.11 23:47:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:08 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:08 - Elevated: Command:route-list . 2024.05.11 23:47:08 - Elevated: Command:route . 2024.05.11 23:47:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:08 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:09 - Elevated: Command:route-list . 2024.05.11 23:47:09 - Elevated: Command:route . 2024.05.11 23:47:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:09 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:09 - Elevated: Command:route-list . 2024.05.11 23:47:10 - Elevated: Command:route . 2024.05.11 23:47:10 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.135/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:10 - Routes, delete 213.152.161.135/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:47:10 - Elevated: Command:route-list . 2024.05.11 23:47:10 - Elevated: Command:route . 2024.05.11 23:47:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.133/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:11 - Routes, delete 213.152.161.133/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:11 - Elevated: Command:route-list . 2024.05.11 23:47:11 - Elevated: Command:route . 2024.05.11 23:47:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:4:6cea:a07e:e6f3:db56/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:11 - Routes, delete 2a00:1678:2470:4:6cea:a07e:e6f3:db56/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:12 - Elevated: Command:route-list . 2024.05.11 23:47:12 - Routes, delete 213.152.161.135/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:47:12 - Elevated: Command:windows-dns . 2024.05.11 23:47:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:12 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:47:12 - Elevated: Command:windows-dns . 2024.05.11 23:47:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:12 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:47:12 - Elevated: Command:windows-dns . 2024.05.11 23:47:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:12 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:47:12 - Elevated: Command:windows-dns . 2024.05.11 23:47:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:12 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:47:12 - Elevated: Command:wfp . 2024.05.11 23:47:12 - Elevated: Command:wfp . 2024.05.11 23:47:12 - Elevated: Command:wfp . 2024.05.11 23:47:12 - Above log line repeated 3 times more . 2024.05.11 23:47:12 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:47:12 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:47:12 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:12 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:47:12 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:12 - Elevated: Command:wfp . 2024.05.11 23:47:12 - Elevated: Command:wfp . 2024.05.11 23:47:12 - Elevated: Command:wfp . 2024.05.11 23:47:13 - Above log line repeated 9 times more . 2024.05.11 23:47:13 - Connection terminated. I 2024.05.11 23:47:16 - Checking authorization ... . 2024.05.11 23:47:17 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:47:17 - Connecting to Atik (Netherlands, Alblasserdam) . 2024.05.11 23:47:17 - Elevated: Command:route-list . 2024.05.11 23:47:17 - Elevated: Command:route . 2024.05.11 23:47:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.12/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:17 - Routes, add 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:47:18 - Elevated: Command:route-list . 2024.05.11 23:47:18 - Routes, add 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:47:18 - Elevated: Command:wfp . 2024.05.11 23:47:18 - Elevated: Command:wfp . 2024.05.11 23:47:18 - Elevated: Command:wfp . 2024.05.11 23:47:18 - Above log line repeated 3 times more . 2024.05.11 23:47:18 - Elevated: Command:openvpn . 2024.05.11 23:47:18 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:47:18 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:47:18 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:47:18 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:47:18 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:47:18 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:47:18 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:47:18 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.12:443 . 2024.05.11 23:47:18 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:47:18 - OpenVPN > UDP link local: (not bound) . 2024.05.11 23:47:18 - OpenVPN > UDP link remote: [AF_INET]213.152.161.12:443 . 2024.05.11 23:47:18 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.12:443, sid=6cd5d934 4777e921 . 2024.05.11 23:47:18 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:47:18 - OpenVPN > VERIFY KU OK . 2024.05.11 23:47:18 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:47:18 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:47:18 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:47:18 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Atik, emailAddress=info@airvpn.org . 2024.05.11 23:47:18 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:47:18 - OpenVPN > [Atik] Peer Connection Initiated with [AF_INET]213.152.161.12:443 . 2024.05.11 23:47:18 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.10.106.1,dhcp-option DNS6 fde6:7a:7d20:66a::1,tun-ipv6,route-gateway 10.10.106.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:66a::10a3/64 fde6:7a:7d20:66a::1,ifconfig 10.10.106.165 255.255.255.0,peer-id 2,cipher AES-256-GCM' . 2024.05.11 23:47:18 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:47:18 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.10.106.1' . 2024.05.11 23:47:18 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:66a::1' . 2024.05.11 23:47:18 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:47:18 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:47:18 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:47:18 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:47:18 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:47:18 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625 . 2024.05.11 23:47:18 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:47:18 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:47:18 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:47:18 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:47:18 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:47:18 - OpenVPN > open_tun . 2024.05.11 23:47:18 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:47:18 - Elevated: Command:wfp . 2024.05.11 23:47:18 - Elevated: Command:wfp . 2024.05.11 23:47:18 - Elevated: Command:wfp . 2024.05.11 23:47:19 - Above log line repeated 3 times more . 2024.05.11 23:47:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.10.106.165 255.255.255.0 . 2024.05.11 23:47:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:47:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:47:19 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:47:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:66a::10a3/128 store=active . 2024.05.11 23:47:19 - OpenVPN > add_route_ipv6(fde6:7a:7d20:66a::/64 -> fde6:7a:7d20:66a::10a3 metric 0) dev Local Area Connection . 2024.05.11 23:47:19 - Exec(16) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:47:19 - Exec(16) done in 93 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:47:19 - Interface List . 2024.05.11 23:47:19 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:47:19 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:47:19 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:47:19 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:47:19 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:47:19 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:47:19 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:47:19 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:47:19 - =========================================================================== . 2024.05.11 23:47:19 - IPv6 Route Table . 2024.05.11 23:47:19 - =========================================================================== . 2024.05.11 23:47:19 - Active Routes: . 2024.05.11 23:47:19 - If Metric Network Destination Gateway . 2024.05.11 23:47:19 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:47:19 - 1 331 ::1/128 On-link . 2024.05.11 23:47:19 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:47:19 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:47:19 - On-link . 2024.05.11 23:47:19 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:47:19 - On-link . 2024.05.11 23:47:19 - 20 261 fe80::/64 On-link . 2024.05.11 23:47:19 - 18 291 fe80::/64 On-link . 2024.05.11 23:47:19 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:47:19 - On-link . 2024.05.11 23:47:19 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:47:19 - On-link . 2024.05.11 23:47:19 - 1 331 ff00::/8 On-link . 2024.05.11 23:47:19 - 20 261 ff00::/8 On-link . 2024.05.11 23:47:19 - 18 291 ff00::/8 On-link . 2024.05.11 23:47:19 - =========================================================================== . 2024.05.11 23:47:19 - Persistent Routes: . 2024.05.11 23:47:19 - None' . 2024.05.11 23:47:19 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:66a::/64 20 fe80::8 store=active . 2024.05.11 23:47:19 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:47:19 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:47:19 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:47:19 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:47:19 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:47:19 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:19 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:47:19 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:19 - Elevated: Command:wfp . 2024.05.11 23:47:19 - Elevated: Command:wfp . 2024.05.11 23:47:19 - Elevated: Command:wfp . 2024.05.11 23:47:19 - Above log line repeated 3 times more . 2024.05.11 23:47:19 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:47:20 - Elevated: Command:route-list . 2024.05.11 23:47:20 - Elevated: Command:windows-dns . 2024.05.11 23:47:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.10.106.1 register=primary validate=no', exit:0 . 2024.05.11 23:47:20 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.10.106.1) . 2024.05.11 23:47:20 - Elevated: Command:windows-dns . 2024.05.11 23:47:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:66a::1 register=primary validate=no', exit:0 . 2024.05.11 23:47:20 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:66a::1) . 2024.05.11 23:47:20 - Elevated: Command:windows-dns . 2024.05.11 23:47:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.10.106.1 register=primary validate=no', exit:0 . 2024.05.11 23:47:20 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.10.106.1) . 2024.05.11 23:47:20 - Elevated: Command:windows-dns . 2024.05.11 23:47:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:66a::1 register=primary validate=no', exit:0 . 2024.05.11 23:47:20 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:66a::1) . 2024.05.11 23:47:21 - Elevated: Command:route-list . 2024.05.11 23:47:21 - Elevated: Command:route . 2024.05.11 23:47:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:21 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:22 - Elevated: Command:route-list . 2024.05.11 23:47:22 - Elevated: Command:route . 2024.05.11 23:47:22 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:22 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:22 - Elevated: Command:route-list . 2024.05.11 23:47:23 - Elevated: Command:route . 2024.05.11 23:47:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:23 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:23 - Elevated: Command:route-list . 2024.05.11 23:47:23 - Elevated: Command:route . 2024.05.11 23:47:24 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:24 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:24 - Elevated: Command:route-list . 2024.05.11 23:47:24 - Elevated: Command:route . 2024.05.11 23:47:24 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.10/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:24 - Routes, add 213.152.161.10/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:25 - Elevated: Command:route-list . 2024.05.11 23:47:25 - Elevated: Command:route . 2024.05.11 23:47:25 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:25 - Routes, add 2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:25 - Flushing DNS . 2024.05.11 23:47:25 - Elevated: Command:dns-flush . 2024.05.11 23:47:25 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:47:25 - NET . 2024.05.11 23:47:25 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:47:25 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:47:25 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:47:25 - Exec(17) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:47:25 - Exec(17) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:47:25 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:47:25 - Checking route IPv4 . 2024.05.11 23:47:27 - Elevated: Command:service-conn-mode . 2024.05.11 23:47:32 - Checking route (4° try) ! 2024.05.11 23:47:32 - Disconnecting . 2024.05.11 23:47:32 - Sending soft termination signal . 2024.05.11 23:47:32 - Elevated: Command:openvpn . 2024.05.11 23:47:35 - OpenVPN > SIGTERM received, sending exit notification to peer . 2024.05.11 23:47:37 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:47:37 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:66a::/64) . 2024.05.11 23:47:37 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:66a::/64 20 fe80::8 store=active . 2024.05.11 23:47:37 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:66a::10a3 store=active . 2024.05.11 23:47:37 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.10.106.165 store=active . 2024.05.11 23:47:37 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2024.05.11 23:47:38 - Elevated: Command:route-list . 2024.05.11 23:47:38 - Elevated: Command:route . 2024.05.11 23:47:38 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:38 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:39 - Elevated: Command:route-list . 2024.05.11 23:47:39 - Elevated: Command:route . 2024.05.11 23:47:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:39 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:39 - Elevated: Command:route-list . 2024.05.11 23:47:39 - Elevated: Command:route . 2024.05.11 23:47:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:40 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:40 - Elevated: Command:route-list . 2024.05.11 23:47:40 - Elevated: Command:route . 2024.05.11 23:47:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:40 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:40 - Elevated: Command:route-list . 2024.05.11 23:47:41 - Elevated: Command:route . 2024.05.11 23:47:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.12/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:41 - Routes, delete 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:47:41 - Elevated: Command:route-list . 2024.05.11 23:47:41 - Elevated: Command:route . 2024.05.11 23:47:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.10/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:41 - Routes, delete 213.152.161.10/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:42 - Elevated: Command:route-list . 2024.05.11 23:47:42 - Elevated: Command:route . 2024.05.11 23:47:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:42 - Routes, delete 2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:47:42 - Elevated: Command:route-list . 2024.05.11 23:47:42 - Routes, delete 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:47:42 - Elevated: Command:windows-dns . 2024.05.11 23:47:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:43 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:47:43 - Elevated: Command:windows-dns . 2024.05.11 23:47:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:43 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:47:43 - Elevated: Command:windows-dns . 2024.05.11 23:47:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:43 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:47:43 - Elevated: Command:windows-dns . 2024.05.11 23:47:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:47:43 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:47:43 - Elevated: Command:wfp . 2024.05.11 23:47:43 - Elevated: Command:wfp . 2024.05.11 23:47:43 - Elevated: Command:wfp . 2024.05.11 23:47:43 - Above log line repeated 3 times more . 2024.05.11 23:47:43 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:47:43 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:47:43 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:43 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:47:43 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:43 - Elevated: Command:wfp . 2024.05.11 23:47:43 - Elevated: Command:wfp . 2024.05.11 23:47:43 - Elevated: Command:wfp . 2024.05.11 23:47:43 - Above log line repeated 9 times more . 2024.05.11 23:47:43 - Connection terminated. I 2024.05.11 23:47:43 - Cancel requested. . 2024.05.11 23:47:43 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:47:43 - Session terminated. I 2024.05.11 23:47:51 - Session starting. I 2024.05.11 23:47:52 - Checking authorization ... ! 2024.05.11 23:47:53 - Connecting to Situla (Netherlands, Alblasserdam) . 2024.05.11 23:47:53 - Elevated: Command:route-list . 2024.05.11 23:47:53 - Elevated: Command:route . 2024.05.11 23:47:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.17/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:54 - Routes, add 213.152.161.17/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:47:54 - Elevated: Command:route-list . 2024.05.11 23:47:54 - Routes, add 213.152.161.17/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:47:54 - Elevated: Command:wireguard . 2024.05.11 23:47:54 - WireGuard > Setup start . 2024.05.11 23:47:55 - WireGuard > Setup complete . 2024.05.11 23:47:55 - WireGuard > Starting WireGuard/0.5.2 (Windows 10.0.19045; amd64) . 2024.05.11 23:47:55 - WireGuard > Watching network interfaces . 2024.05.11 23:47:55 - WireGuard > Resolving DNS names . 2024.05.11 23:47:55 - WireGuard > Creating network adapter . 2024.05.11 23:47:55 - WireGuard > Using existing driver 0.10 . 2024.05.11 23:47:55 - WireGuard > Creating adapter . 2024.05.11 23:47:55 - WireGuard > Using WireGuardNT/0.10 . 2024.05.11 23:47:55 - WireGuard > Eddie build 2 . 2024.05.11 23:47:55 - WireGuard > Dropping privileges . 2024.05.11 23:47:55 - WireGuard > Interface created . 2024.05.11 23:47:55 - WireGuard > Setup interface . 2024.05.11 23:47:56 - Elevated: Command:wfp . 2024.05.11 23:47:56 - Elevated: Command:wfp . 2024.05.11 23:47:56 - Elevated: Command:wfp . 2024.05.11 23:47:56 - Above log line repeated 3 times more . 2024.05.11 23:47:56 - WireGuard > Setting interface configuration . 2024.05.11 23:47:56 - WireGuard > Peer 1 created . 2024.05.11 23:47:56 - WireGuard > Monitoring MTU of default v4 routes . 2024.05.11 23:47:56 - WireGuard > Interface up . 2024.05.11 23:47:56 - WireGuard > Setting device v4 addresses . 2024.05.11 23:47:56 - WireGuard > Received first handshake . 2024.05.11 23:47:56 - Interface Eddie metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:47:56 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:56 - Interface Eddie metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:47:56 - Elevated: Command:set-interface-metric . 2024.05.11 23:47:56 - Elevated: Command:wfp . 2024.05.11 23:47:56 - Elevated: Command:wfp . 2024.05.11 23:47:56 - Elevated: Command:wfp . 2024.05.11 23:47:56 - Above log line repeated 3 times more . 2024.05.11 23:47:56 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:47:56 - Elevated: Command:route-list . 2024.05.11 23:47:57 - Elevated: Command:windows-dns . 2024.05.11 23:47:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Eddie" source=static address=10.128.0.1 register=primary validate=no', exit:0 . 2024.05.11 23:47:57 - DNS IPv4 of a network adapter forced (Eddie, from automatic to 10.128.0.1) . 2024.05.11 23:47:57 - Elevated: Command:windows-dns . 2024.05.11 23:47:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Eddie" source=static address=fd7d:76ee:e68f:a993::1 register=primary validate=no', exit:0 . 2024.05.11 23:47:57 - DNS IPv6 of a network adapter forced (Eddie, from automatic to fd7d:76ee:e68f:a993::1) . 2024.05.11 23:47:57 - Elevated: Command:windows-dns . 2024.05.11 23:47:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.128.0.1 register=primary validate=no', exit:0 . 2024.05.11 23:47:57 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.128.0.1) . 2024.05.11 23:47:57 - Elevated: Command:windows-dns . 2024.05.11 23:47:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fd7d:76ee:e68f:a993::1 register=primary validate=no', exit:0 . 2024.05.11 23:47:57 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fd7d:76ee:e68f:a993::1) . 2024.05.11 23:47:58 - Elevated: Command:route-list . 2024.05.11 23:47:58 - Elevated: Command:route . 2024.05.11 23:47:58 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="46" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:58 - Routes, add 0.0.0.0/1 for interface "Eddie (WireGuard Tunnel)". . 2024.05.11 23:47:59 - Elevated: Command:route-list . 2024.05.11 23:47:59 - Elevated: Command:route . 2024.05.11 23:47:59 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="46" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:47:59 - Routes, add 128.0.0.0/1 for interface "Eddie (WireGuard Tunnel)". . 2024.05.11 23:48:00 - Elevated: Command:route-list . 2024.05.11 23:48:00 - Elevated: Command:route . 2024.05.11 23:48:00 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="46" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:00 - Routes, add ::/1 for interface "Eddie (WireGuard Tunnel)". . 2024.05.11 23:48:01 - Elevated: Command:route-list . 2024.05.11 23:48:01 - Elevated: Command:route . 2024.05.11 23:48:01 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="46" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:01 - Routes, add 8000::/1 for interface "Eddie (WireGuard Tunnel)". . 2024.05.11 23:48:02 - Elevated: Command:route-list . 2024.05.11 23:48:02 - Elevated: Command:route . 2024.05.11 23:48:02 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.15/32" interface="46" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:02 - Routes, add 213.152.161.15/32 for interface "Eddie (WireGuard Tunnel)". . 2024.05.11 23:48:03 - Elevated: Command:route-list . 2024.05.11 23:48:03 - Elevated: Command:route . 2024.05.11 23:48:03 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:39:ddf1:680c:a9e0:377a/128" interface="46" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:03 - Routes, add 2a00:1678:2470:39:ddf1:680c:a9e0:377a/128 for interface "Eddie (WireGuard Tunnel)". . 2024.05.11 23:48:03 - Flushing DNS . 2024.05.11 23:48:03 - Elevated: Command:dns-flush . 2024.05.11 23:48:03 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:48:03 - NET . 2024.05.11 23:48:03 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:48:03 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:48:03 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:48:03 - Exec(18) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:48:03 - Exec(18) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:48:03 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:48:03 - Checking route IPv4 . 2024.05.11 23:48:10 - Checking route (4° try) . 2024.05.11 23:48:14 - Checking route (5° try) E 2024.05.11 23:48:14 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK . 2024.05.11 23:48:14 - WireGuard > Monitoring MTU of default v6 routes . 2024.05.11 23:48:14 - WireGuard > Setting device v6 addresses . 2024.05.11 23:48:14 - WireGuard > Startup complete ! 2024.05.11 23:48:14 - Disconnecting . 2024.05.11 23:48:14 - Elevated: Command:wireguard . 2024.05.11 23:48:14 - WireGuard > Stop request received . 2024.05.11 23:48:14 - WireGuard > Stopping . 2024.05.11 23:48:15 - WireGuard > Completed . 2024.05.11 23:48:16 - Elevated: Command:route-list . 2024.05.11 23:48:16 - Routes, delete 0.0.0.0/1 for interface "{7CB6D269-0786-7E57-C13F-6CDFFF02FB02}", not exists. . 2024.05.11 23:48:16 - Elevated: Command:route-list . 2024.05.11 23:48:16 - Routes, delete 128.0.0.0/1 for interface "{7CB6D269-0786-7E57-C13F-6CDFFF02FB02}", not exists. . 2024.05.11 23:48:17 - Elevated: Command:route-list . 2024.05.11 23:48:17 - Routes, delete ::/1 for interface "{7CB6D269-0786-7E57-C13F-6CDFFF02FB02}", not exists. . 2024.05.11 23:48:17 - Elevated: Command:route-list . 2024.05.11 23:48:17 - Routes, delete 8000::/1 for interface "{7CB6D269-0786-7E57-C13F-6CDFFF02FB02}", not exists. . 2024.05.11 23:48:17 - Elevated: Command:route-list . 2024.05.11 23:48:18 - Elevated: Command:route . 2024.05.11 23:48:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.17/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:18 - Routes, delete 213.152.161.17/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:48:18 - Elevated: Command:route-list . 2024.05.11 23:48:18 - Routes, delete 213.152.161.15/32 for interface "{7CB6D269-0786-7E57-C13F-6CDFFF02FB02}", not exists. . 2024.05.11 23:48:18 - Elevated: Command:route-list . 2024.05.11 23:48:18 - Routes, delete 2a00:1678:2470:39:ddf1:680c:a9e0:377a/128 for interface "{7CB6D269-0786-7E57-C13F-6CDFFF02FB02}", not exists. . 2024.05.11 23:48:19 - Elevated: Command:route-list . 2024.05.11 23:48:19 - Routes, delete 213.152.161.17/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:48:19 - Elevated: Command:windows-dns . 2024.05.11 23:48:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Eddie" source=dhcp register=primary validate=no', exit:1, out:'The filename, directory name, or volume label syntax is incorrect.' . 2024.05.11 23:48:19 - DNS IPv4 of a network adapter restored to original settings (Eddie, to automatic) . 2024.05.11 23:48:19 - Elevated: Command:windows-dns . 2024.05.11 23:48:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Eddie" source=dhcp register=primary validate=no', exit:1, out:'The filename, directory name, or volume label syntax is incorrect.' . 2024.05.11 23:48:19 - DNS IPv6 of a network adapter restored to original settings (Eddie, to automatic) . 2024.05.11 23:48:19 - Elevated: Command:windows-dns . 2024.05.11 23:48:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:48:19 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:48:19 - Elevated: Command:windows-dns . 2024.05.11 23:48:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:48:20 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:48:20 - Elevated: Command:wfp . 2024.05.11 23:48:20 - Elevated: Command:wfp . 2024.05.11 23:48:20 - Elevated: Command:wfp . 2024.05.11 23:48:20 - Above log line repeated 3 times more . 2024.05.11 23:48:20 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:48:20 - Elevated: Command:wfp . 2024.05.11 23:48:20 - Elevated: Command:wfp . 2024.05.11 23:48:20 - Elevated: Command:wfp . 2024.05.11 23:48:20 - Above log line repeated 3 times more . 2024.05.11 23:48:20 - Connection terminated. I 2024.05.11 23:48:22 - Cancel requested. . 2024.05.11 23:48:22 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:48:22 - Session terminated. . 2024.05.11 23:48:35 - Elevated: Command:service-conn-mode I 2024.05.11 23:48:37 - Session starting. I 2024.05.11 23:48:38 - Checking authorization ... . 2024.05.11 23:48:39 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:48:39 - Connecting to Atik (Netherlands, Alblasserdam) . 2024.05.11 23:48:39 - Elevated: Command:route-list . 2024.05.11 23:48:40 - Elevated: Command:route . 2024.05.11 23:48:40 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.12/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:40 - Routes, add 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:48:40 - Elevated: Command:route-list . 2024.05.11 23:48:40 - Routes, add 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:48:40 - Elevated: Command:wfp . 2024.05.11 23:48:40 - Elevated: Command:wfp . 2024.05.11 23:48:40 - Elevated: Command:wfp . 2024.05.11 23:48:40 - Above log line repeated 3 times more . 2024.05.11 23:48:40 - Elevated: Command:openvpn . 2024.05.11 23:48:40 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:48:40 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:48:40 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:48:40 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:48:40 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:48:40 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:48:40 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:48:40 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.12:443 . 2024.05.11 23:48:40 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:48:40 - OpenVPN > Attempting to establish TCP connection with [AF_INET]213.152.161.12:443 [nonblock] . 2024.05.11 23:48:40 - OpenVPN > TCP connection established with [AF_INET]213.152.161.12:443 . 2024.05.11 23:48:40 - OpenVPN > TCP_CLIENT link local: (not bound) . 2024.05.11 23:48:40 - OpenVPN > TCP_CLIENT link remote: [AF_INET]213.152.161.12:443 . 2024.05.11 23:48:40 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.12:443, sid=bd836987 db400093 . 2024.05.11 23:48:40 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:48:40 - OpenVPN > VERIFY KU OK . 2024.05.11 23:48:40 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:48:40 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:48:40 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:48:40 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Atik, emailAddress=info@airvpn.org . 2024.05.11 23:48:40 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:48:40 - OpenVPN > [Atik] Peer Connection Initiated with [AF_INET]213.152.161.12:443 . 2024.05.11 23:48:41 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.10.107.1,dhcp-option DNS6 fde6:7a:7d20:66b::1,tun-ipv6,route-gateway 10.10.107.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:66b::10ef/64 fde6:7a:7d20:66b::1,ifconfig 10.10.107.241 255.255.255.0,peer-id 0,cipher AES-256-GCM' . 2024.05.11 23:48:41 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:48:41 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.10.107.1' . 2024.05.11 23:48:41 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:66b::1' . 2024.05.11 23:48:41 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:48:41 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:48:41 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:48:41 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:48:41 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:48:41 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1627 . 2024.05.11 23:48:41 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:48:41 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:48:41 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:48:41 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:48:41 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:48:41 - OpenVPN > open_tun . 2024.05.11 23:48:41 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:48:41 - Elevated: Command:wfp . 2024.05.11 23:48:41 - Elevated: Command:wfp . 2024.05.11 23:48:41 - Elevated: Command:wfp . 2024.05.11 23:48:41 - Above log line repeated 3 times more . 2024.05.11 23:48:41 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.10.107.241 255.255.255.0 . 2024.05.11 23:48:41 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:48:41 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:48:41 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:48:41 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:66b::10ef/128 store=active . 2024.05.11 23:48:41 - OpenVPN > add_route_ipv6(fde6:7a:7d20:66b::/64 -> fde6:7a:7d20:66b::10ef metric 0) dev Local Area Connection . 2024.05.11 23:48:41 - Exec(19) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:48:42 - Exec(19) done in 94 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:48:42 - Interface List . 2024.05.11 23:48:42 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:48:42 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:48:42 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:48:42 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:48:42 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:48:42 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:48:42 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:48:42 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:48:42 - =========================================================================== . 2024.05.11 23:48:42 - IPv6 Route Table . 2024.05.11 23:48:42 - =========================================================================== . 2024.05.11 23:48:42 - Active Routes: . 2024.05.11 23:48:42 - If Metric Network Destination Gateway . 2024.05.11 23:48:42 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:48:42 - 1 331 ::1/128 On-link . 2024.05.11 23:48:42 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:48:42 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:48:42 - On-link . 2024.05.11 23:48:42 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:48:42 - On-link . 2024.05.11 23:48:42 - 20 261 fe80::/64 On-link . 2024.05.11 23:48:42 - 18 291 fe80::/64 On-link . 2024.05.11 23:48:42 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:48:42 - On-link . 2024.05.11 23:48:42 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:48:42 - On-link . 2024.05.11 23:48:42 - 1 331 ff00::/8 On-link . 2024.05.11 23:48:42 - 20 261 ff00::/8 On-link . 2024.05.11 23:48:42 - 18 291 ff00::/8 On-link . 2024.05.11 23:48:42 - =========================================================================== . 2024.05.11 23:48:42 - Persistent Routes: . 2024.05.11 23:48:42 - None' . 2024.05.11 23:48:42 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:66b::/64 20 fe80::8 store=active . 2024.05.11 23:48:42 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:48:42 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:48:42 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:48:42 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:48:42 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:48:42 - Elevated: Command:set-interface-metric . 2024.05.11 23:48:42 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:48:42 - Elevated: Command:set-interface-metric . 2024.05.11 23:48:42 - Elevated: Command:wfp . 2024.05.11 23:48:42 - Elevated: Command:wfp . 2024.05.11 23:48:42 - Elevated: Command:wfp . 2024.05.11 23:48:42 - Above log line repeated 3 times more . 2024.05.11 23:48:42 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:48:42 - Elevated: Command:route-list . 2024.05.11 23:48:43 - Elevated: Command:windows-dns . 2024.05.11 23:48:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.10.107.1 register=primary validate=no', exit:0 . 2024.05.11 23:48:43 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.10.107.1) . 2024.05.11 23:48:43 - Elevated: Command:windows-dns . 2024.05.11 23:48:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:66b::1 register=primary validate=no', exit:0 . 2024.05.11 23:48:43 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:66b::1) . 2024.05.11 23:48:43 - Elevated: Command:windows-dns . 2024.05.11 23:48:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.10.107.1 register=primary validate=no', exit:0 . 2024.05.11 23:48:43 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.10.107.1) . 2024.05.11 23:48:43 - Elevated: Command:windows-dns . 2024.05.11 23:48:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:66b::1 register=primary validate=no', exit:0 . 2024.05.11 23:48:43 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:66b::1) . 2024.05.11 23:48:44 - Elevated: Command:route-list . 2024.05.11 23:48:44 - Elevated: Command:route . 2024.05.11 23:48:44 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:44 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:48:44 - Elevated: Command:route-list . 2024.05.11 23:48:45 - Elevated: Command:route . 2024.05.11 23:48:45 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:45 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:48:45 - Elevated: Command:route-list . 2024.05.11 23:48:45 - Elevated: Command:route . 2024.05.11 23:48:46 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:46 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:48:46 - Elevated: Command:route-list . 2024.05.11 23:48:46 - Elevated: Command:route . 2024.05.11 23:48:46 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:46 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:48:47 - Elevated: Command:route-list . 2024.05.11 23:48:47 - Elevated: Command:route . 2024.05.11 23:48:47 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.10/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:47 - Routes, add 213.152.161.10/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:48:47 - Elevated: Command:route-list . 2024.05.11 23:48:48 - Elevated: Command:route . 2024.05.11 23:48:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:48:48 - Routes, add 2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:48:48 - Flushing DNS . 2024.05.11 23:48:48 - Elevated: Command:dns-flush . 2024.05.11 23:48:48 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:48:48 - NET . 2024.05.11 23:48:48 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:48:48 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:48:48 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:48:48 - Exec(20) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:48:48 - Exec(20) done in 63 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:48:48 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:48:48 - Checking route IPv4 . 2024.05.11 23:48:55 - Checking route (4° try) . 2024.05.11 23:48:59 - Checking route (5° try) E 2024.05.11 23:48:59 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:48:59 - Disconnecting . 2024.05.11 23:48:59 - Sending soft termination signal . 2024.05.11 23:48:59 - Elevated: Command:openvpn . 2024.05.11 23:49:02 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:49:02 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:66b::/64) . 2024.05.11 23:49:02 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:66b::/64 20 fe80::8 store=active . 2024.05.11 23:49:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:66b::10ef store=active . 2024.05.11 23:49:02 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.10.107.241 store=active . 2024.05.11 23:49:02 - OpenVPN > SIGTERM[hard,] received, process exiting . 2024.05.11 23:49:03 - Elevated: Command:route-list . 2024.05.11 23:49:03 - Elevated: Command:route . 2024.05.11 23:49:03 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:03 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:04 - Elevated: Command:route-list . 2024.05.11 23:49:04 - Elevated: Command:route . 2024.05.11 23:49:04 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:04 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:04 - Elevated: Command:route-list . 2024.05.11 23:49:04 - Elevated: Command:route . 2024.05.11 23:49:04 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:05 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:05 - Elevated: Command:route-list . 2024.05.11 23:49:05 - Elevated: Command:route . 2024.05.11 23:49:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:05 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:06 - Elevated: Command:route-list . 2024.05.11 23:49:06 - Elevated: Command:route . 2024.05.11 23:49:06 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.12/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:06 - Routes, delete 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:49:06 - Elevated: Command:route-list . 2024.05.11 23:49:07 - Elevated: Command:route . 2024.05.11 23:49:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.10/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:07 - Routes, delete 213.152.161.10/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:07 - Elevated: Command:route-list . 2024.05.11 23:49:07 - Elevated: Command:route . 2024.05.11 23:49:07 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:07 - Routes, delete 2a00:1678:2470:38:172e:6bff:5dbb:b0ae/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:08 - Elevated: Command:route-list . 2024.05.11 23:49:08 - Routes, delete 213.152.161.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:49:08 - Elevated: Command:windows-dns . 2024.05.11 23:49:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:08 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:49:08 - Elevated: Command:windows-dns . 2024.05.11 23:49:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:08 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:49:08 - Elevated: Command:windows-dns . 2024.05.11 23:49:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:08 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:49:08 - Elevated: Command:windows-dns . 2024.05.11 23:49:08 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:08 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:49:08 - Elevated: Command:wfp . 2024.05.11 23:49:08 - Elevated: Command:wfp . 2024.05.11 23:49:08 - Elevated: Command:wfp . 2024.05.11 23:49:08 - Above log line repeated 3 times more . 2024.05.11 23:49:08 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:49:09 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:49:09 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:09 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:49:09 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:09 - Elevated: Command:wfp . 2024.05.11 23:49:09 - Elevated: Command:wfp . 2024.05.11 23:49:09 - Elevated: Command:wfp . 2024.05.11 23:49:09 - Above log line repeated 9 times more . 2024.05.11 23:49:09 - Connection terminated. I 2024.05.11 23:49:12 - Checking authorization ... . 2024.05.11 23:49:13 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:49:13 - Connecting to Merga (Netherlands, Alblasserdam) . 2024.05.11 23:49:13 - Elevated: Command:route-list . 2024.05.11 23:49:13 - Elevated: Command:route . 2024.05.11 23:49:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.32/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:13 - Routes, add 213.152.161.32/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:49:14 - Elevated: Command:route-list . 2024.05.11 23:49:14 - Routes, add 213.152.161.32/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:49:14 - Elevated: Command:wfp . 2024.05.11 23:49:14 - Elevated: Command:wfp . 2024.05.11 23:49:14 - Elevated: Command:wfp . 2024.05.11 23:49:14 - Above log line repeated 3 times more . 2024.05.11 23:49:14 - Elevated: Command:openvpn . 2024.05.11 23:49:14 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:49:14 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:49:14 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:49:14 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:49:14 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:49:14 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:49:14 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:49:14 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.32:443 . 2024.05.11 23:49:14 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:49:14 - OpenVPN > Attempting to establish TCP connection with [AF_INET]213.152.161.32:443 [nonblock] . 2024.05.11 23:49:14 - OpenVPN > TCP connection established with [AF_INET]213.152.161.32:443 . 2024.05.11 23:49:14 - OpenVPN > TCP_CLIENT link local: (not bound) . 2024.05.11 23:49:14 - OpenVPN > TCP_CLIENT link remote: [AF_INET]213.152.161.32:443 . 2024.05.11 23:49:14 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.32:443, sid=85df7975 492ae450 . 2024.05.11 23:49:14 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:49:14 - OpenVPN > VERIFY KU OK . 2024.05.11 23:49:14 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:49:14 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:49:14 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:49:14 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Merga, emailAddress=info@airvpn.org . 2024.05.11 23:49:14 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:49:14 - OpenVPN > [Merga] Peer Connection Initiated with [AF_INET]213.152.161.32:443 . 2024.05.11 23:49:14 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.22.43.1,dhcp-option DNS6 fde6:7a:7d20:122b::1,tun-ipv6,route-gateway 10.22.43.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:122b::10f4/64 fde6:7a:7d20:122b::1,ifconfig 10.22.43.246 255.255.255.0,peer-id 0,cipher AES-256-GCM' . 2024.05.11 23:49:14 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:49:14 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.22.43.1' . 2024.05.11 23:49:14 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:122b::1' . 2024.05.11 23:49:14 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:49:14 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:49:14 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:49:14 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:49:14 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:49:14 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1627 . 2024.05.11 23:49:14 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:49:14 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:49:14 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:49:14 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:49:14 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:49:14 - OpenVPN > open_tun . 2024.05.11 23:49:14 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:49:15 - Elevated: Command:wfp . 2024.05.11 23:49:15 - Elevated: Command:wfp . 2024.05.11 23:49:15 - Elevated: Command:wfp . 2024.05.11 23:49:15 - Above log line repeated 3 times more . 2024.05.11 23:49:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.22.43.246 255.255.255.0 . 2024.05.11 23:49:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:49:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:49:15 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:49:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:122b::10f4/128 store=active . 2024.05.11 23:49:15 - OpenVPN > add_route_ipv6(fde6:7a:7d20:122b::/64 -> fde6:7a:7d20:122b::10f4 metric 0) dev Local Area Connection . 2024.05.11 23:49:15 - Exec(21) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:49:15 - Exec(21) done in 78 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:49:15 - Interface List . 2024.05.11 23:49:15 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:49:15 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:49:15 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:49:15 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:49:15 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:49:15 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:49:15 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:49:15 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:49:15 - =========================================================================== . 2024.05.11 23:49:15 - IPv6 Route Table . 2024.05.11 23:49:15 - =========================================================================== . 2024.05.11 23:49:15 - Active Routes: . 2024.05.11 23:49:15 - If Metric Network Destination Gateway . 2024.05.11 23:49:15 - 18 291 ::/0 fe80::2266:cfff:fe5e:5190 . 2024.05.11 23:49:15 - 1 331 ::1/128 On-link . 2024.05.11 23:49:15 - 18 291 2a01:e0a:b36:9390::/64 On-link . 2024.05.11 23:49:15 - 18 291 2a01:e0a:b36:9390:20fc:bee3:51de:8704/128 . 2024.05.11 23:49:15 - On-link . 2024.05.11 23:49:15 - 18 291 2a01:e0a:b36:9390:ede1:a68b:7bd8:fcfe/128 . 2024.05.11 23:49:15 - On-link . 2024.05.11 23:49:15 - 20 261 fde6:7a:7d20:122b::/64 fe80::8 . 2024.05.11 23:49:15 - 20 261 fe80::/64 On-link . 2024.05.11 23:49:15 - 18 291 fe80::/64 On-link . 2024.05.11 23:49:15 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:49:15 - On-link . 2024.05.11 23:49:15 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:49:15 - On-link . 2024.05.11 23:49:15 - 1 331 ff00::/8 On-link . 2024.05.11 23:49:15 - 20 261 ff00::/8 On-link . 2024.05.11 23:49:15 - 18 291 ff00::/8 On-link . 2024.05.11 23:49:15 - =========================================================================== . 2024.05.11 23:49:15 - Persistent Routes: . 2024.05.11 23:49:15 - None' . 2024.05.11 23:49:15 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:122b::/64 20 fe80::8 store=active . 2024.05.11 23:49:15 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:49:15 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:49:15 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:49:15 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:49:16 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:49:16 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:16 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:49:16 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:16 - Elevated: Command:wfp . 2024.05.11 23:49:16 - Elevated: Command:wfp . 2024.05.11 23:49:16 - Elevated: Command:wfp . 2024.05.11 23:49:16 - Above log line repeated 3 times more . 2024.05.11 23:49:16 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:49:16 - Elevated: Command:route-list . 2024.05.11 23:49:16 - Elevated: Command:windows-dns . 2024.05.11 23:49:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.22.43.1 register=primary validate=no', exit:0 . 2024.05.11 23:49:16 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.22.43.1) . 2024.05.11 23:49:16 - Elevated: Command:windows-dns . 2024.05.11 23:49:16 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:122b::1 register=primary validate=no', exit:0 . 2024.05.11 23:49:16 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:122b::1) . 2024.05.11 23:49:16 - Elevated: Command:windows-dns . 2024.05.11 23:49:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.22.43.1 register=primary validate=no', exit:0 . 2024.05.11 23:49:17 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.22.43.1) . 2024.05.11 23:49:17 - Elevated: Command:windows-dns . 2024.05.11 23:49:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:122b::1 register=primary validate=no', exit:0 . 2024.05.11 23:49:17 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:122b::1) . 2024.05.11 23:49:17 - Elevated: Command:route-list . 2024.05.11 23:49:17 - Elevated: Command:route . 2024.05.11 23:49:17 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:17 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:18 - Elevated: Command:route-list . 2024.05.11 23:49:18 - Elevated: Command:route . 2024.05.11 23:49:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:18 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:19 - Elevated: Command:route-list . 2024.05.11 23:49:19 - Elevated: Command:route . 2024.05.11 23:49:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:19 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:19 - Elevated: Command:route-list . 2024.05.11 23:49:20 - Elevated: Command:route . 2024.05.11 23:49:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:20 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:20 - Elevated: Command:route-list . 2024.05.11 23:49:21 - Elevated: Command:route . 2024.05.11 23:49:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.161.30/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:21 - Routes, add 213.152.161.30/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:21 - Elevated: Command:route-list . 2024.05.11 23:49:21 - Elevated: Command:route . 2024.05.11 23:49:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:42:e8d8:5e4e:65f3:5e89/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:21 - Routes, add 2a00:1678:2470:42:e8d8:5e4e:65f3:5e89/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:21 - Flushing DNS . 2024.05.11 23:49:21 - Elevated: Command:dns-flush . 2024.05.11 23:49:22 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:49:22 - NET . 2024.05.11 23:49:22 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:49:22 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:49:22 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:49:22 - Exec(22) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:49:22 - Exec(22) done in 62 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:49:22 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:49:22 - Checking route IPv4 . 2024.05.11 23:49:29 - Checking route (4° try) . 2024.05.11 23:49:33 - Checking route (5° try) E 2024.05.11 23:49:33 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:49:33 - Disconnecting . 2024.05.11 23:49:33 - Sending soft termination signal . 2024.05.11 23:49:33 - Elevated: Command:openvpn . 2024.05.11 23:49:36 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:49:36 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:122b::/64) . 2024.05.11 23:49:36 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:122b::/64 20 fe80::8 store=active . 2024.05.11 23:49:36 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:122b::10f4 store=active . 2024.05.11 23:49:36 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.22.43.246 store=active . 2024.05.11 23:49:36 - OpenVPN > SIGTERM[hard,] received, process exiting . 2024.05.11 23:49:36 - Elevated: Command:route-list . 2024.05.11 23:49:37 - Elevated: Command:route . 2024.05.11 23:49:37 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:37 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:37 - Elevated: Command:route-list . 2024.05.11 23:49:37 - Elevated: Command:route . 2024.05.11 23:49:38 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:38 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:38 - Elevated: Command:route-list . 2024.05.11 23:49:38 - Elevated: Command:route . 2024.05.11 23:49:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:39 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:39 - Elevated: Command:route-list . 2024.05.11 23:49:39 - Elevated: Command:route . 2024.05.11 23:49:39 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:39 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:40 - Elevated: Command:route-list . 2024.05.11 23:49:40 - Routes, delete 213.152.161.32/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:49:41 - Elevated: Command:route-list . 2024.05.11 23:49:41 - Elevated: Command:route . 2024.05.11 23:49:41 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.161.30/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:41 - Routes, delete 213.152.161.30/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:41 - Elevated: Command:route-list . 2024.05.11 23:49:41 - Elevated: Command:route . 2024.05.11 23:49:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:42:e8d8:5e4e:65f3:5e89/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:42 - Routes, delete 2a00:1678:2470:42:e8d8:5e4e:65f3:5e89/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:42 - Elevated: Command:route-list . 2024.05.11 23:49:42 - Routes, delete 213.152.161.32/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:49:42 - Elevated: Command:windows-dns . 2024.05.11 23:49:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:42 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:49:42 - Elevated: Command:windows-dns . 2024.05.11 23:49:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:42 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:49:42 - Elevated: Command:windows-dns . 2024.05.11 23:49:42 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:42 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:49:42 - Elevated: Command:windows-dns . 2024.05.11 23:49:43 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:49:43 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:49:43 - Elevated: Command:wfp . 2024.05.11 23:49:43 - Elevated: Command:wfp . 2024.05.11 23:49:43 - Elevated: Command:wfp . 2024.05.11 23:49:43 - Above log line repeated 3 times more . 2024.05.11 23:49:43 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:49:43 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:49:43 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:43 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:49:43 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:43 - Elevated: Command:wfp . 2024.05.11 23:49:43 - Elevated: Command:wfp . 2024.05.11 23:49:43 - Elevated: Command:wfp . 2024.05.11 23:49:43 - Above log line repeated 9 times more . 2024.05.11 23:49:43 - Connection terminated. I 2024.05.11 23:49:46 - Checking authorization ... . 2024.05.11 23:49:47 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:49:47 - Connecting to Hydrus (Netherlands, Alblasserdam) . 2024.05.11 23:49:47 - Elevated: Command:route-list . 2024.05.11 23:49:47 - Elevated: Command:route . 2024.05.11 23:49:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.12/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:48 - Routes, add 213.152.162.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:49:48 - Elevated: Command:route-list . 2024.05.11 23:49:48 - Routes, add 213.152.162.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:49:48 - Elevated: Command:wfp . 2024.05.11 23:49:48 - Elevated: Command:wfp . 2024.05.11 23:49:48 - Elevated: Command:wfp . 2024.05.11 23:49:48 - Above log line repeated 3 times more . 2024.05.11 23:49:48 - Elevated: Command:openvpn . 2024.05.11 23:49:48 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:49:48 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:49:48 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:49:48 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:49:48 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:49:48 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:49:48 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:49:48 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.162.12:443 . 2024.05.11 23:49:48 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:49:48 - OpenVPN > Attempting to establish TCP connection with [AF_INET]213.152.162.12:443 [nonblock] . 2024.05.11 23:49:48 - OpenVPN > TCP connection established with [AF_INET]213.152.162.12:443 . 2024.05.11 23:49:48 - OpenVPN > TCP_CLIENT link local: (not bound) . 2024.05.11 23:49:48 - OpenVPN > TCP_CLIENT link remote: [AF_INET]213.152.162.12:443 . 2024.05.11 23:49:48 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.162.12:443, sid=641a32bb 63da8843 . 2024.05.11 23:49:48 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:49:48 - OpenVPN > VERIFY KU OK . 2024.05.11 23:49:48 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:49:48 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:49:48 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:49:48 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Hydrus, emailAddress=info@airvpn.org . 2024.05.11 23:49:48 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:49:48 - OpenVPN > [Hydrus] Peer Connection Initiated with [AF_INET]213.152.162.12:443 . 2024.05.11 23:49:48 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.19.139.1,dhcp-option DNS6 fde6:7a:7d20:f8b::1,tun-ipv6,route-gateway 10.19.139.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:f8b::10e6/64 fde6:7a:7d20:f8b::1,ifconfig 10.19.139.232 255.255.255.0,peer-id 0,cipher AES-256-GCM' . 2024.05.11 23:49:48 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:49:48 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.19.139.1' . 2024.05.11 23:49:48 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:f8b::1' . 2024.05.11 23:49:48 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:49:49 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:49:49 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:49:49 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:49:49 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:49:49 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1627 . 2024.05.11 23:49:49 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:49:49 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:49:49 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:49:49 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:49:49 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:49:49 - OpenVPN > open_tun . 2024.05.11 23:49:49 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:49:49 - Elevated: Command:wfp . 2024.05.11 23:49:49 - Elevated: Command:wfp . 2024.05.11 23:49:49 - Elevated: Command:wfp . 2024.05.11 23:49:49 - Above log line repeated 3 times more . 2024.05.11 23:49:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.19.139.232 255.255.255.0 . 2024.05.11 23:49:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:49:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:49:49 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:49:49 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:f8b::10e6/128 store=active . 2024.05.11 23:49:49 - OpenVPN > add_route_ipv6(fde6:7a:7d20:f8b::/64 -> fde6:7a:7d20:f8b::10e6 metric 0) dev Local Area Connection . 2024.05.11 23:49:49 - Exec(23) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:49:50 - Exec(23) done in 110 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:49:50 - Interface List . 2024.05.11 23:49:50 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:49:50 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:49:50 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:49:50 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:49:50 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:49:50 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:49:50 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:49:50 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:49:50 - =========================================================================== . 2024.05.11 23:49:50 - IPv6 Route Table . 2024.05.11 23:49:50 - =========================================================================== . 2024.05.11 23:49:50 - Active Routes: . 2024.05.11 23:49:50 - If Metric Network Destination Gateway . 2024.05.11 23:49:50 - 1 331 ::1/128 On-link . 2024.05.11 23:49:50 - 20 261 fde6:7a:7d20:f8b::/64 fe80::8 . 2024.05.11 23:49:50 - 20 261 fe80::/64 On-link . 2024.05.11 23:49:50 - 18 291 fe80::/64 On-link . 2024.05.11 23:49:50 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:49:50 - On-link . 2024.05.11 23:49:50 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:49:50 - On-link . 2024.05.11 23:49:50 - 1 331 ff00::/8 On-link . 2024.05.11 23:49:50 - 20 261 ff00::/8 On-link . 2024.05.11 23:49:50 - 18 291 ff00::/8 On-link . 2024.05.11 23:49:50 - =========================================================================== . 2024.05.11 23:49:50 - Persistent Routes: . 2024.05.11 23:49:50 - None' . 2024.05.11 23:49:50 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:f8b::/64 20 fe80::8 store=active . 2024.05.11 23:49:50 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:49:50 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:49:50 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:49:50 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:49:50 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:49:50 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:50 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:49:50 - Elevated: Command:set-interface-metric . 2024.05.11 23:49:50 - Elevated: Command:wfp . 2024.05.11 23:49:50 - Elevated: Command:wfp . 2024.05.11 23:49:50 - Elevated: Command:wfp . 2024.05.11 23:49:50 - Above log line repeated 3 times more . 2024.05.11 23:49:50 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:49:50 - Elevated: Command:route-list . 2024.05.11 23:49:51 - Elevated: Command:windows-dns . 2024.05.11 23:49:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.19.139.1 register=primary validate=no', exit:0 . 2024.05.11 23:49:51 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.19.139.1) . 2024.05.11 23:49:51 - Elevated: Command:windows-dns . 2024.05.11 23:49:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:f8b::1 register=primary validate=no', exit:0 . 2024.05.11 23:49:51 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:f8b::1) . 2024.05.11 23:49:51 - Elevated: Command:windows-dns . 2024.05.11 23:49:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.19.139.1 register=primary validate=no', exit:0 . 2024.05.11 23:49:51 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.19.139.1) . 2024.05.11 23:49:51 - Elevated: Command:windows-dns . 2024.05.11 23:49:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:f8b::1 register=primary validate=no', exit:0 . 2024.05.11 23:49:51 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:f8b::1) . 2024.05.11 23:49:52 - Elevated: Command:route-list . 2024.05.11 23:49:52 - Elevated: Command:route . 2024.05.11 23:49:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:52 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:53 - Elevated: Command:route-list . 2024.05.11 23:49:53 - Elevated: Command:route . 2024.05.11 23:49:53 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:53 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:53 - Elevated: Command:route-list . 2024.05.11 23:49:53 - Elevated: Command:route . 2024.05.11 23:49:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:54 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:54 - Elevated: Command:route-list . 2024.05.11 23:49:54 - Elevated: Command:route . 2024.05.11 23:49:54 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:54 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:55 - Elevated: Command:route-list . 2024.05.11 23:49:55 - Elevated: Command:route . 2024.05.11 23:49:55 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="213.152.162.10/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:55 - Routes, add 213.152.162.10/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:56 - Elevated: Command:route-list . 2024.05.11 23:49:56 - Elevated: Command:route . 2024.05.11 23:49:56 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:54:ea2b:30ed:4392:a955/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:49:56 - Routes, add 2a00:1678:2470:54:ea2b:30ed:4392:a955/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:49:56 - Flushing DNS . 2024.05.11 23:49:56 - Elevated: Command:dns-flush . 2024.05.11 23:49:56 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:49:56 - NET . 2024.05.11 23:49:56 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:49:56 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:49:56 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:49:56 - Exec(24) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:49:56 - Exec(24) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:49:56 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:49:56 - Checking route IPv4 . 2024.05.11 23:50:03 - Checking route (4° try) . 2024.05.11 23:50:07 - Checking route (5° try) E 2024.05.11 23:50:08 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:50:08 - Disconnecting . 2024.05.11 23:50:08 - Sending soft termination signal . 2024.05.11 23:50:08 - Elevated: Command:openvpn . 2024.05.11 23:50:11 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:50:11 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:f8b::/64) . 2024.05.11 23:50:11 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:f8b::/64 20 fe80::8 store=active . 2024.05.11 23:50:11 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:f8b::10e6 store=active . 2024.05.11 23:50:11 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.19.139.232 store=active . 2024.05.11 23:50:11 - OpenVPN > SIGTERM[hard,] received, process exiting . 2024.05.11 23:50:11 - Elevated: Command:route-list . 2024.05.11 23:50:11 - Elevated: Command:route . 2024.05.11 23:50:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:1, out:'Element not found.' . 2024.05.11 23:50:12 - Elevated: Command:route-list . 2024.05.11 23:50:12 - Routes, delete 128.0.0.0/1 for interface "{FC36D3AB-3A13-4A29-8E34-DDDF368A2CCB}", not exists. . 2024.05.11 23:50:12 - Elevated: Command:route-list . 2024.05.11 23:50:12 - Routes, delete ::/1 for interface "{FC36D3AB-3A13-4A29-8E34-DDDF368A2CCB}", not exists. . 2024.05.11 23:50:12 - Elevated: Command:route-list . 2024.05.11 23:50:12 - Routes, delete 8000::/1 for interface "{FC36D3AB-3A13-4A29-8E34-DDDF368A2CCB}", not exists. . 2024.05.11 23:50:13 - Elevated: Command:route-list . 2024.05.11 23:50:13 - Elevated: Command:route . 2024.05.11 23:50:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="213.152.162.12/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:13 - Routes, delete 213.152.162.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:50:13 - Elevated: Command:route-list . 2024.05.11 23:50:13 - Routes, delete 213.152.162.10/32 for interface "{FC36D3AB-3A13-4A29-8E34-DDDF368A2CCB}", not exists. . 2024.05.11 23:50:13 - Elevated: Command:route-list . 2024.05.11 23:50:13 - Routes, delete 2a00:1678:2470:54:ea2b:30ed:4392:a955/128 for interface "{FC36D3AB-3A13-4A29-8E34-DDDF368A2CCB}", not exists. . 2024.05.11 23:50:14 - Elevated: Command:route-list . 2024.05.11 23:50:14 - Routes, delete 213.152.162.12/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:50:14 - Elevated: Command:windows-dns . 2024.05.11 23:50:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:14 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:50:14 - Elevated: Command:windows-dns . 2024.05.11 23:50:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:14 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:50:14 - Elevated: Command:windows-dns . 2024.05.11 23:50:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:14 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:50:14 - Elevated: Command:windows-dns . 2024.05.11 23:50:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:14 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:50:14 - Elevated: Command:wfp . 2024.05.11 23:50:14 - Elevated: Command:wfp . 2024.05.11 23:50:14 - Elevated: Command:wfp . 2024.05.11 23:50:14 - Above log line repeated 3 times more . 2024.05.11 23:50:14 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:50:15 - Elevated: Command:wfp . 2024.05.11 23:50:15 - Elevated: Command:wfp . 2024.05.11 23:50:15 - Elevated: Command:wfp . 2024.05.11 23:50:15 - Above log line repeated 9 times more . 2024.05.11 23:50:15 - Connection terminated. I 2024.05.11 23:50:16 - Cancel requested. . 2024.05.11 23:50:16 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:50:16 - Session terminated. I 2024.05.11 23:50:21 - Session starting. I 2024.05.11 23:50:22 - Checking authorization ... . 2024.05.11 23:50:23 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:50:23 - Connecting to Capricornus (Belgium, Brussels) . 2024.05.11 23:50:23 - Elevated: Command:route-list . 2024.05.11 23:50:23 - Elevated: Command:route . 2024.05.11 23:50:24 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="194.187.251.93/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:24 - Routes, add 194.187.251.93/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:50:24 - Elevated: Command:route-list . 2024.05.11 23:50:24 - Routes, add 194.187.251.93/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:50:24 - Elevated: Command:wfp . 2024.05.11 23:50:24 - Elevated: Command:wfp . 2024.05.11 23:50:24 - Elevated: Command:wfp . 2024.05.11 23:50:24 - Above log line repeated 3 times more . 2024.05.11 23:50:24 - Elevated: Command:openvpn . 2024.05.11 23:50:24 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:50:24 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:50:24 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:50:24 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:50:24 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:50:24 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:50:24 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:50:24 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]194.187.251.93:443 . 2024.05.11 23:50:24 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:50:24 - OpenVPN > Attempting to establish TCP connection with [AF_INET]194.187.251.93:443 [nonblock] . 2024.05.11 23:50:24 - OpenVPN > TCP connection established with [AF_INET]194.187.251.93:443 . 2024.05.11 23:50:24 - OpenVPN > TCP_CLIENT link local: (not bound) . 2024.05.11 23:50:24 - OpenVPN > TCP_CLIENT link remote: [AF_INET]194.187.251.93:443 . 2024.05.11 23:50:24 - OpenVPN > TLS: Initial packet from [AF_INET]194.187.251.93:443, sid=d95a5708 08d0d172 . 2024.05.11 23:50:24 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:50:24 - OpenVPN > VERIFY KU OK . 2024.05.11 23:50:24 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:50:24 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:50:24 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:50:24 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Capricornus, emailAddress=info@airvpn.org . 2024.05.11 23:50:24 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:50:24 - OpenVPN > [Capricornus] Peer Connection Initiated with [AF_INET]194.187.251.93:443 . 2024.05.11 23:50:24 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.12.171.1,dhcp-option DNS6 fde6:7a:7d20:8ab::1,tun-ipv6,route-gateway 10.12.171.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:8ab::101d/64 fde6:7a:7d20:8ab::1,ifconfig 10.12.171.31 255.255.255.0,peer-id 0,cipher AES-256-GCM' . 2024.05.11 23:50:24 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:50:24 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.12.171.1' . 2024.05.11 23:50:24 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:8ab::1' . 2024.05.11 23:50:24 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:50:24 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:50:24 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:50:25 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:50:25 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:50:25 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1627 . 2024.05.11 23:50:25 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:50:25 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:50:25 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:50:25 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:50:25 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:50:25 - OpenVPN > open_tun . 2024.05.11 23:50:25 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:50:25 - Elevated: Command:wfp . 2024.05.11 23:50:25 - Elevated: Command:wfp . 2024.05.11 23:50:25 - Elevated: Command:wfp . 2024.05.11 23:50:25 - Above log line repeated 3 times more . 2024.05.11 23:50:25 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.12.171.31 255.255.255.0 . 2024.05.11 23:50:25 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:50:25 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:50:25 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:50:25 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:8ab::101d/128 store=active . 2024.05.11 23:50:25 - OpenVPN > add_route_ipv6(fde6:7a:7d20:8ab::/64 -> fde6:7a:7d20:8ab::101d metric 0) dev Local Area Connection . 2024.05.11 23:50:25 - Exec(25) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:50:25 - Exec(25) done in 109 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:50:25 - Interface List . 2024.05.11 23:50:25 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:50:25 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:50:25 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:50:25 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:50:25 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:50:25 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:50:25 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:50:25 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:50:25 - =========================================================================== . 2024.05.11 23:50:25 - IPv6 Route Table . 2024.05.11 23:50:25 - =========================================================================== . 2024.05.11 23:50:25 - Active Routes: . 2024.05.11 23:50:25 - If Metric Network Destination Gateway . 2024.05.11 23:50:25 - 1 331 ::1/128 On-link . 2024.05.11 23:50:25 - 18 291 fe80::/64 On-link . 2024.05.11 23:50:25 - 20 261 fe80::/64 On-link . 2024.05.11 23:50:25 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:50:25 - On-link . 2024.05.11 23:50:25 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:50:25 - On-link . 2024.05.11 23:50:25 - 1 331 ff00::/8 On-link . 2024.05.11 23:50:25 - 18 291 ff00::/8 On-link . 2024.05.11 23:50:25 - 20 261 ff00::/8 On-link . 2024.05.11 23:50:25 - =========================================================================== . 2024.05.11 23:50:25 - Persistent Routes: . 2024.05.11 23:50:25 - None' . 2024.05.11 23:50:25 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:8ab::/64 20 fe80::8 store=active . 2024.05.11 23:50:25 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:50:26 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:50:26 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:50:26 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:50:26 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:50:26 - Elevated: Command:set-interface-metric . 2024.05.11 23:50:26 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:50:26 - Elevated: Command:set-interface-metric . 2024.05.11 23:50:26 - Elevated: Command:wfp . 2024.05.11 23:50:26 - Elevated: Command:wfp . 2024.05.11 23:50:26 - Elevated: Command:wfp . 2024.05.11 23:50:26 - Above log line repeated 3 times more . 2024.05.11 23:50:26 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:50:26 - Elevated: Command:route-list . 2024.05.11 23:50:26 - Elevated: Command:windows-dns . 2024.05.11 23:50:26 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.12.171.1 register=primary validate=no', exit:0 . 2024.05.11 23:50:26 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.12.171.1) . 2024.05.11 23:50:26 - Elevated: Command:windows-dns . 2024.05.11 23:50:27 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:8ab::1 register=primary validate=no', exit:0 . 2024.05.11 23:50:27 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:8ab::1) . 2024.05.11 23:50:27 - Elevated: Command:windows-dns . 2024.05.11 23:50:27 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.12.171.1 register=primary validate=no', exit:0 . 2024.05.11 23:50:27 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.12.171.1) . 2024.05.11 23:50:27 - Elevated: Command:windows-dns . 2024.05.11 23:50:27 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:8ab::1 register=primary validate=no', exit:0 . 2024.05.11 23:50:27 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:8ab::1) . 2024.05.11 23:50:27 - Elevated: Command:route-list . 2024.05.11 23:50:27 - Elevated: Command:route . 2024.05.11 23:50:28 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:28 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:28 - Elevated: Command:route-list . 2024.05.11 23:50:28 - Elevated: Command:route . 2024.05.11 23:50:28 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:28 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:29 - Elevated: Command:route-list . 2024.05.11 23:50:29 - Elevated: Command:route . 2024.05.11 23:50:29 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:29 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:29 - Elevated: Command:route-list . 2024.05.11 23:50:30 - Elevated: Command:route . 2024.05.11 23:50:30 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:30 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:30 - Elevated: Command:route-list . 2024.05.11 23:50:30 - Elevated: Command:route . 2024.05.11 23:50:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="194.187.251.91/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:31 - Routes, add 194.187.251.91/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:31 - Elevated: Command:route-list . 2024.05.11 23:50:31 - Elevated: Command:route . 2024.05.11 23:50:31 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2001:ac8:27:a:d655:22aa:7624:7223/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:31 - Routes, add 2001:ac8:27:a:d655:22aa:7624:7223/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:31 - Flushing DNS . 2024.05.11 23:50:31 - Elevated: Command:dns-flush . 2024.05.11 23:50:31 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:50:31 - NET . 2024.05.11 23:50:31 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:50:31 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:50:31 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:50:31 - Exec(26) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:50:32 - Exec(26) done in 62 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:50:32 - Successfully flushed the DNS Resolver Cache.' I 2024.05.11 23:50:32 - Checking route IPv4 . 2024.05.11 23:50:38 - Checking route (4° try) . 2024.05.11 23:50:43 - Checking route (5° try) E 2024.05.11 23:50:43 - Checking route IPv4 failed, last reason: Fetch url error:SSL peer certificate or SSH remote key was not OK ! 2024.05.11 23:50:43 - Disconnecting . 2024.05.11 23:50:43 - Sending soft termination signal . 2024.05.11 23:50:43 - Elevated: Command:openvpn . 2024.05.11 23:50:46 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:50:46 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:8ab::/64) . 2024.05.11 23:50:46 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:8ab::/64 20 fe80::8 store=active . 2024.05.11 23:50:46 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:8ab::101d store=active . 2024.05.11 23:50:46 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.12.171.31 store=active . 2024.05.11 23:50:46 - OpenVPN > SIGTERM[hard,] received, process exiting . 2024.05.11 23:50:46 - Elevated: Command:route-list . 2024.05.11 23:50:47 - Elevated: Command:route . 2024.05.11 23:50:47 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:47 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:47 - Elevated: Command:route-list . 2024.05.11 23:50:47 - Elevated: Command:route . 2024.05.11 23:50:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:48 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:48 - Elevated: Command:route-list . 2024.05.11 23:50:48 - Elevated: Command:route . 2024.05.11 23:50:48 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:48 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:49 - Elevated: Command:route-list . 2024.05.11 23:50:49 - Elevated: Command:route . 2024.05.11 23:50:49 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:49 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:49 - Elevated: Command:route-list . 2024.05.11 23:50:50 - Elevated: Command:route . 2024.05.11 23:50:50 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="194.187.251.93/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:50 - Routes, delete 194.187.251.93/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:50:50 - Elevated: Command:route-list . 2024.05.11 23:50:50 - Elevated: Command:route . 2024.05.11 23:50:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="194.187.251.91/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:51 - Routes, delete 194.187.251.91/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:51 - Elevated: Command:route-list . 2024.05.11 23:50:51 - Elevated: Command:route . 2024.05.11 23:50:51 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2001:ac8:27:a:d655:22aa:7624:7223/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:51 - Routes, delete 2001:ac8:27:a:d655:22aa:7624:7223/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:50:52 - Elevated: Command:route-list . 2024.05.11 23:50:52 - Routes, delete 194.187.251.93/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:50:52 - Elevated: Command:windows-dns . 2024.05.11 23:50:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:52 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:50:52 - Elevated: Command:windows-dns . 2024.05.11 23:50:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:52 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:50:52 - Elevated: Command:windows-dns . 2024.05.11 23:50:52 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:52 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:50:52 - Elevated: Command:windows-dns . 2024.05.11 23:50:53 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:50:53 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:50:53 - Elevated: Command:wfp . 2024.05.11 23:50:53 - Elevated: Command:wfp . 2024.05.11 23:50:53 - Elevated: Command:wfp . 2024.05.11 23:50:53 - Above log line repeated 3 times more . 2024.05.11 23:50:53 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:50:53 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:50:53 - Elevated: Command:set-interface-metric . 2024.05.11 23:50:53 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:50:53 - Elevated: Command:set-interface-metric . 2024.05.11 23:50:53 - Elevated: Command:wfp . 2024.05.11 23:50:53 - Elevated: Command:wfp . 2024.05.11 23:50:53 - Elevated: Command:wfp . 2024.05.11 23:50:53 - Above log line repeated 9 times more . 2024.05.11 23:50:53 - Connection terminated. I 2024.05.11 23:50:56 - Checking authorization ... . 2024.05.11 23:50:57 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:50:57 - Connecting to Scuti (Netherlands, Alblasserdam) . 2024.05.11 23:50:57 - Elevated: Command:route-list . 2024.05.11 23:50:57 - Elevated: Command:route . 2024.05.11 23:50:58 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.157/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:50:58 - Routes, add 134.19.179.157/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:50:58 - Elevated: Command:route-list . 2024.05.11 23:50:58 - Routes, add 134.19.179.157/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:50:58 - Elevated: Command:wfp . 2024.05.11 23:50:58 - Elevated: Command:wfp . 2024.05.11 23:50:58 - Elevated: Command:wfp . 2024.05.11 23:50:58 - Above log line repeated 3 times more . 2024.05.11 23:50:58 - Elevated: Command:openvpn . 2024.05.11 23:50:58 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:50:58 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:50:58 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:50:58 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:50:58 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:50:58 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:50:58 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:50:58 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]134.19.179.157:443 . 2024.05.11 23:50:58 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:50:58 - OpenVPN > Attempting to establish TCP connection with [AF_INET]134.19.179.157:443 [nonblock] . 2024.05.11 23:50:58 - OpenVPN > TCP connection established with [AF_INET]134.19.179.157:443 . 2024.05.11 23:50:58 - OpenVPN > TCP_CLIENT link local: (not bound) . 2024.05.11 23:50:58 - OpenVPN > TCP_CLIENT link remote: [AF_INET]134.19.179.157:443 . 2024.05.11 23:50:58 - OpenVPN > TLS: Initial packet from [AF_INET]134.19.179.157:443, sid=6eb70900 9c5930e2 . 2024.05.11 23:50:58 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:50:58 - OpenVPN > VERIFY KU OK . 2024.05.11 23:50:58 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:50:58 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:50:58 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:50:58 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Scuti, emailAddress=info@airvpn.org . 2024.05.11 23:50:58 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:50:58 - OpenVPN > [Scuti] Peer Connection Initiated with [AF_INET]134.19.179.157:443 . 2024.05.11 23:50:59 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.34.107.1,dhcp-option DNS6 fde6:7a:7d20:1e6b::1,tun-ipv6,route-gateway 10.34.107.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:1e6b::1068/64 fde6:7a:7d20:1e6b::1,ifconfig 10.34.107.106 255.255.255.0,peer-id 0,cipher AES-256-GCM' . 2024.05.11 23:50:59 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:50:59 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.34.107.1' . 2024.05.11 23:50:59 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:1e6b::1' . 2024.05.11 23:50:59 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:50:59 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:50:59 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:50:59 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:50:59 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:50:59 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1627 . 2024.05.11 23:50:59 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:50:59 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:50:59 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:50:59 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:50:59 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:50:59 - OpenVPN > open_tun . 2024.05.11 23:50:59 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:50:59 - Elevated: Command:wfp . 2024.05.11 23:50:59 - Elevated: Command:wfp . 2024.05.11 23:50:59 - Elevated: Command:wfp . 2024.05.11 23:50:59 - Above log line repeated 3 times more . 2024.05.11 23:50:59 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.34.107.106 255.255.255.0 . 2024.05.11 23:50:59 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:50:59 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:50:59 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:50:59 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:1e6b::1068/128 store=active . 2024.05.11 23:51:00 - OpenVPN > add_route_ipv6(fde6:7a:7d20:1e6b::/64 -> fde6:7a:7d20:1e6b::1068 metric 0) dev Local Area Connection . 2024.05.11 23:51:00 - Exec(27) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:51:00 - Exec(27) done in 140 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:51:00 - Interface List . 2024.05.11 23:51:00 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:51:00 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:51:00 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:51:00 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:51:00 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:51:00 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:51:00 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:51:00 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:51:00 - =========================================================================== . 2024.05.11 23:51:00 - IPv6 Route Table . 2024.05.11 23:51:00 - =========================================================================== . 2024.05.11 23:51:00 - Active Routes: . 2024.05.11 23:51:00 - If Metric Network Destination Gateway . 2024.05.11 23:51:00 - 1 331 ::1/128 On-link . 2024.05.11 23:51:00 - 18 291 fe80::/64 On-link . 2024.05.11 23:51:00 - 20 261 fe80::/64 On-link . 2024.05.11 23:51:00 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:51:00 - On-link . 2024.05.11 23:51:00 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:51:00 - On-link . 2024.05.11 23:51:00 - 1 331 ff00::/8 On-link . 2024.05.11 23:51:00 - 18 291 ff00::/8 On-link . 2024.05.11 23:51:00 - 20 261 ff00::/8 On-link . 2024.05.11 23:51:00 - =========================================================================== . 2024.05.11 23:51:00 - Persistent Routes: . 2024.05.11 23:51:00 - None' . 2024.05.11 23:51:00 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:1e6b::/64 20 fe80::8 store=active . 2024.05.11 23:51:00 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:51:00 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:51:00 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:51:00 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:51:00 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:51:00 - Elevated: Command:set-interface-metric . 2024.05.11 23:51:00 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:51:00 - Elevated: Command:set-interface-metric . 2024.05.11 23:51:00 - Elevated: Command:wfp . 2024.05.11 23:51:00 - Elevated: Command:wfp . 2024.05.11 23:51:00 - Elevated: Command:wfp . 2024.05.11 23:51:00 - Above log line repeated 3 times more . 2024.05.11 23:51:00 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:51:00 - Elevated: Command:route-list . 2024.05.11 23:51:01 - Elevated: Command:windows-dns . 2024.05.11 23:51:01 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.34.107.1 register=primary validate=no', exit:0 . 2024.05.11 23:51:01 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.34.107.1) . 2024.05.11 23:51:01 - Elevated: Command:windows-dns . 2024.05.11 23:51:01 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:1e6b::1 register=primary validate=no', exit:0 . 2024.05.11 23:51:01 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:1e6b::1) . 2024.05.11 23:51:01 - Elevated: Command:windows-dns . 2024.05.11 23:51:01 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.34.107.1 register=primary validate=no', exit:0 . 2024.05.11 23:51:01 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.34.107.1) . 2024.05.11 23:51:01 - Elevated: Command:windows-dns . 2024.05.11 23:51:01 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:1e6b::1 register=primary validate=no', exit:0 . 2024.05.11 23:51:01 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:1e6b::1) . 2024.05.11 23:51:02 - Elevated: Command:route-list . 2024.05.11 23:51:02 - Elevated: Command:route . 2024.05.11 23:51:02 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:02 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:02 - Elevated: Command:route-list . 2024.05.11 23:51:03 - Elevated: Command:route . 2024.05.11 23:51:03 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:03 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:03 - Elevated: Command:route-list . 2024.05.11 23:51:03 - Elevated: Command:route . 2024.05.11 23:51:04 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:04 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:04 - Elevated: Command:route-list . 2024.05.11 23:51:04 - Elevated: Command:route . 2024.05.11 23:51:04 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:04 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:05 - Elevated: Command:route-list . 2024.05.11 23:51:05 - Elevated: Command:route . 2024.05.11 23:51:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.155/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:05 - Routes, add 134.19.179.155/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:05 - Elevated: Command:route-list . 2024.05.11 23:51:06 - Elevated: Command:route . 2024.05.11 23:51:06 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:dddd:fda2:8371:a19e:e06d/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:06 - Routes, add 2a00:1678:2470:dddd:fda2:8371:a19e:e06d/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:06 - Flushing DNS . 2024.05.11 23:51:06 - Elevated: Command:dns-flush . 2024.05.11 23:51:06 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:51:06 - NET . 2024.05.11 23:51:06 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:51:06 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:51:06 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:51:06 - Exec(28) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:51:06 - Exec(28) done in 125 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:51:06 - Successfully flushed the DNS Resolver Cache.' ! 2024.05.11 23:51:06 - Disconnecting . 2024.05.11 23:51:06 - Sending soft termination signal . 2024.05.11 23:51:06 - Elevated: Command:openvpn . 2024.05.11 23:51:09 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:51:09 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:1e6b::/64) . 2024.05.11 23:51:09 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:1e6b::/64 20 fe80::8 store=active . 2024.05.11 23:51:09 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:1e6b::1068 store=active . 2024.05.11 23:51:09 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.34.107.106 store=active . 2024.05.11 23:51:09 - OpenVPN > SIGTERM[hard,] received, process exiting . 2024.05.11 23:51:09 - Elevated: Command:route-list . 2024.05.11 23:51:10 - Elevated: Command:route . 2024.05.11 23:51:10 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:10 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:10 - Elevated: Command:route-list . 2024.05.11 23:51:10 - Elevated: Command:route . 2024.05.11 23:51:10 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:10 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:11 - Elevated: Command:route-list . 2024.05.11 23:51:11 - Elevated: Command:route . 2024.05.11 23:51:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:11 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:11 - Elevated: Command:route-list . 2024.05.11 23:51:12 - Elevated: Command:route . 2024.05.11 23:51:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:12 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:12 - Elevated: Command:route-list . 2024.05.11 23:51:12 - Elevated: Command:route . 2024.05.11 23:51:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.157/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:12 - Routes, delete 134.19.179.157/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:51:13 - Elevated: Command:route-list . 2024.05.11 23:51:13 - Elevated: Command:route . 2024.05.11 23:51:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.155/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:13 - Routes, delete 134.19.179.155/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:13 - Elevated: Command:route-list . 2024.05.11 23:51:14 - Elevated: Command:route . 2024.05.11 23:51:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:dddd:fda2:8371:a19e:e06d/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:51:14 - Routes, delete 2a00:1678:2470:dddd:fda2:8371:a19e:e06d/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:51:14 - Elevated: Command:route-list . 2024.05.11 23:51:14 - Routes, delete 134.19.179.157/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:51:14 - Elevated: Command:windows-dns . 2024.05.11 23:51:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:51:14 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:51:14 - Elevated: Command:windows-dns . 2024.05.11 23:51:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:51:14 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:51:14 - Elevated: Command:windows-dns . 2024.05.11 23:51:15 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:51:15 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:51:15 - Elevated: Command:windows-dns . 2024.05.11 23:51:15 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:51:15 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Above log line repeated 3 times more . 2024.05.11 23:51:15 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:51:15 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:51:15 - Elevated: Command:set-interface-metric . 2024.05.11 23:51:15 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:51:15 - Elevated: Command:set-interface-metric . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Above log line repeated 9 times more . 2024.05.11 23:51:15 - Connection terminated. I 2024.05.11 23:51:15 - Cancel requested. . 2024.05.11 23:51:15 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:51:15 - Session terminated. . 2024.05.11 23:51:15 - Shutdown in progress . 2024.05.11 23:51:15 - Deactivation of Network Lock . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Elevated: Command:wfp . 2024.05.11 23:51:15 - Above log line repeated 50 times more . 2024.05.11 23:51:15 - Elevated: Client soft disconnected . 2024.05.11 23:51:16 - Shutdown complete . 2024.05.11 23:53:55 - Reading options from C:\Users\Oc\AppData\Local\Eddie\default.profile . 2024.05.11 23:53:57 - Elevated: Command:wfp . 2024.05.11 23:53:57 - Elevated: Command:wfp . 2024.05.11 23:53:57 - Exec(1) of 'E:\Program Files\AirVPN\openvpn.exe', 1 args: '--version'; . 2024.05.11 23:53:57 - Exec(1) done in 93 ms, exit: 0, out: 'OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:53:57 - library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:53:57 - Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:53:57 - Originally developed by James Yonan . 2024.05.11 23:53:57 - Copyright (C) 2002-2021 OpenVPN Inc <sales@openvpn.net> . 2024.05.11 23:53:57 - Compile time defines: N/A' . 2024.05.11 23:53:57 - Exec(2) of 'E:\Program Files\AirVPN\plink.exe', 1 args: '-V'; . 2024.05.11 23:53:57 - Exec(2) done in 78 ms, exit: 0, out: 'plink: Release 0.73 . 2024.05.11 23:53:57 - Build platform: 64-bit x86 Windows . 2024.05.11 23:53:57 - Compiler: clang 7.0.0 (tags/RELEASE_700/final), emulating Visual Studio 2013 (12.0), _MSC_VER=1800 . 2024.05.11 23:53:57 - Source commit: 745ed3ad3beaf52fc623827e770b3a068b238dd5' . 2024.05.11 23:53:57 - Exec(3) of 'E:\Program Files\AirVPN\stunnel.exe', 1 args: '-version'; . 2024.05.11 23:53:57 - Exec(3) done in 110 ms, exit: 0, err: 'stunnel 5.56 on x86-pc-mingw32-gnu platform . 2024.05.11 23:53:57 - Compiled/running with OpenSSL 1.1.1g 21 Apr 2020 . 2024.05.11 23:53:57 - Threading:WIN32 Sockets:SELECT,IPv6 TLS:ENGINE,OCSP,PSK,SNI . 2024.05.11 23:53:57 - Global options: . 2024.05.11 23:53:57 - RNDbytes = 1024 . 2024.05.11 23:53:57 - RNDoverwrite = yes . 2024.05.11 23:53:57 - taskbar = yes . 2024.05.11 23:53:57 - Service-level options: . 2024.05.11 23:53:57 - ciphers = HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK . 2024.05.11 23:53:57 - ciphersuites = TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256 (with TLSv1.3) . 2024.05.11 23:53:57 - curves = X25519:P-256:X448:P-521:P-384 . 2024.05.11 23:53:57 - debug = notice . 2024.05.11 23:53:57 - logId = sequential . 2024.05.11 23:53:57 - options = NO_SSLv2 . 2024.05.11 23:53:57 - options = NO_SSLv3 . 2024.05.11 23:53:57 - sessionCacheSize = 1000 . 2024.05.11 23:53:57 - sessionCacheTimeout = 300 seconds . 2024.05.11 23:53:57 - stack = 65536 bytes . 2024.05.11 23:53:57 - TIMEOUTbusy = 300 seconds . 2024.05.11 23:53:57 - TIMEOUTclose = 60 seconds . 2024.05.11 23:53:57 - TIMEOUTconnect = 10 seconds . 2024.05.11 23:53:57 - TIMEOUTidle = 43200 seconds . 2024.05.11 23:53:57 - verify = none' . 2024.05.11 23:53:57 - OpenVPN - Version: 2.5.5 - OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 (E:\Program Files\AirVPN\openvpn.exe) . 2024.05.11 23:53:57 - SSH - Version: plink 0.73 (E:\Program Files\AirVPN\plink.exe) . 2024.05.11 23:53:57 - SSL - Version: stunnel 5.56 (E:\Program Files\AirVPN\stunnel.exe) . 2024.05.11 23:53:57 - Elevated: Command:wfp . 2024.05.11 23:53:57 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'WFP Show Filters file="C:\WINDOWS\TEMP\\eddie_tmp_wfp_rules.xml"', exit:0, out:'Data collection successful; output = C:\WINDOWS\TEMP\\eddie_tmp_wfp_rules.xml' . 2024.05.11 23:53:58 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:53:58 - Activation of Network Lock - Windows Filtering Platform . 2024.05.11 23:53:58 - Elevated: Command:wfp . 2024.05.11 23:53:58 - Elevated: Command:wfp . 2024.05.11 23:53:58 - Elevated: Command:wfp . 2024.05.11 23:54:00 - Above log line repeated 49 times more I 2024.05.11 23:54:00 - Ready . 2024.05.11 23:54:00 - Collect information about AirVPN completed I 2024.05.11 23:54:01 - Session starting. . 2024.05.11 23:54:02 - Collect information about AirVPN completed . 2024.05.11 23:54:02 - Waiting for latency tests (1 to go) I 2024.05.11 23:54:04 - Checking authorization ... . 2024.05.11 23:54:05 - Using WinTun network interface "Local Area Connection (Wintun Userspace Tunnel)" ! 2024.05.11 23:54:05 - Connecting to Capella (Netherlands, Alblasserdam) . 2024.05.11 23:54:05 - Elevated: Command:route-list . 2024.05.11 23:54:05 - Elevated: Command:route . 2024.05.11 23:54:05 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.141/32" interface="18" nexthop="192.168.1.254" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:05 - Routes, add 134.19.179.141/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:54:06 - Elevated: Command:route-list . 2024.05.11 23:54:06 - Routes, add 134.19.179.141/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", already exists. . 2024.05.11 23:54:06 - Elevated: Command:wfp . 2024.05.11 23:54:06 - Elevated: Command:wfp . 2024.05.11 23:54:06 - Elevated: Command:wfp . 2024.05.11 23:54:06 - Above log line repeated 3 times more . 2024.05.11 23:54:06 - Elevated: Command:openvpn . 2024.05.11 23:54:06 - OpenVPN > OpenVPN 2.5.5 Windows-MSVC [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Dec 15 2021 . 2024.05.11 23:54:06 - OpenVPN > Windows version 10.0 (Windows 10 or greater) 64bit . 2024.05.11 23:54:06 - OpenVPN > library versions: OpenSSL 1.1.1l 24 Aug 2021, LZO 2.10 . 2024.05.11 23:54:06 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:54:06 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:54:06 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key . 2024.05.11 23:54:06 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication . 2024.05.11 23:54:06 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]134.19.179.141:443 . 2024.05.11 23:54:06 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144] . 2024.05.11 23:54:06 - OpenVPN > Attempting to establish TCP connection with [AF_INET]134.19.179.141:443 [nonblock] . 2024.05.11 23:54:06 - OpenVPN > TCP connection established with [AF_INET]134.19.179.141:443 . 2024.05.11 23:54:06 - OpenVPN > TCP_CLIENT link local: (not bound) . 2024.05.11 23:54:06 - OpenVPN > TCP_CLIENT link remote: [AF_INET]134.19.179.141:443 . 2024.05.11 23:54:06 - OpenVPN > TLS: Initial packet from [AF_INET]134.19.179.141:443, sid=0cbde2f0 f6f546cb . 2024.05.11 23:54:06 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org . 2024.05.11 23:54:06 - OpenVPN > VERIFY KU OK . 2024.05.11 23:54:06 - OpenVPN > Validating certificate extended key usage . 2024.05.11 23:54:06 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication . 2024.05.11 23:54:06 - OpenVPN > VERIFY EKU OK . 2024.05.11 23:54:06 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Capella, emailAddress=info@airvpn.org . 2024.05.11 23:54:06 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512 . 2024.05.11 23:54:06 - OpenVPN > [Capella] Peer Connection Initiated with [AF_INET]134.19.179.141:443 . 2024.05.11 23:54:06 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.33.171.1,dhcp-option DNS6 fde6:7a:7d20:1dab::1,tun-ipv6,route-gateway 10.33.171.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:1dab::105c/64 fde6:7a:7d20:1dab::1,ifconfig 10.33.171.94 255.255.255.0,peer-id 0,cipher AES-256-GCM' . 2024.05.11 23:54:06 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp' . 2024.05.11 23:54:06 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS 10.33.171.1' . 2024.05.11 23:54:06 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:1dab::1' . 2024.05.11 23:54:06 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified . 2024.05.11 23:54:06 - OpenVPN > OPTIONS IMPORT: compression parms modified . 2024.05.11 23:54:06 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified . 2024.05.11 23:54:06 - OpenVPN > OPTIONS IMPORT: route-related options modified . 2024.05.11 23:54:06 - OpenVPN > OPTIONS IMPORT: peer-id set . 2024.05.11 23:54:06 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1627 . 2024.05.11 23:54:06 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified . 2024.05.11 23:54:06 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM' . 2024.05.11 23:54:06 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:54:06 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key . 2024.05.11 23:54:06 - OpenVPN > interactive service msg_channel=0 . 2024.05.11 23:54:06 - OpenVPN > open_tun . 2024.05.11 23:54:06 - OpenVPN > wintun device [Local Area Connection] opened . 2024.05.11 23:54:07 - Elevated: Command:wfp . 2024.05.11 23:54:07 - Elevated: Command:wfp . 2024.05.11 23:54:07 - Elevated: Command:wfp . 2024.05.11 23:54:07 - Above log line repeated 3 times more . 2024.05.11 23:54:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip set address 20 static 10.33.171.94 255.255.255.0 . 2024.05.11 23:54:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete dns 20 all . 2024.05.11 23:54:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ip delete wins 20 all . 2024.05.11 23:54:07 - OpenVPN > IPv4 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:54:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address 20 fde6:7a:7d20:1dab::105c/128 store=active . 2024.05.11 23:54:07 - OpenVPN > add_route_ipv6(fde6:7a:7d20:1dab::/64 -> fde6:7a:7d20:1dab::105c metric 0) dev Local Area Connection . 2024.05.11 23:54:07 - Exec(4) of 'C:\WINDOWS\system32\route.exe', 2 args: '-6';'PRINT'; . 2024.05.11 23:54:07 - Exec(4) done in 93 ms, exit: 0, out: '=========================================================================== . 2024.05.11 23:54:07 - Interface List . 2024.05.11 23:54:07 - 13...00 e0 4c 68 09 59 ......Realtek USB GbE Family Controller #2 . 2024.05.11 23:54:07 - 20...........................Wintun Userspace Tunnel . 2024.05.11 23:54:07 - 10...98 48 27 df 5c d4 ......TP-Link Wireless USB Adapter . 2024.05.11 23:54:07 - 3...9a 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter . 2024.05.11 23:54:07 - 9...98 48 27 df 5c d4 ......Microsoft Wi-Fi Direct Virtual Adapter #2 . 2024.05.11 23:54:07 - 18...18 60 24 94 f4 f6 ......Intel(R) Ethernet Connection (2) I218-LM . 2024.05.11 23:54:07 - 14...e8 48 b8 c8 20 00 ......Bluetooth Device (Personal Area Network) . 2024.05.11 23:54:07 - 1...........................Software Loopback Interface 1 . 2024.05.11 23:54:07 - =========================================================================== . 2024.05.11 23:54:07 - IPv6 Route Table . 2024.05.11 23:54:07 - =========================================================================== . 2024.05.11 23:54:07 - Active Routes: . 2024.05.11 23:54:07 - If Metric Network Destination Gateway . 2024.05.11 23:54:07 - 1 331 ::1/128 On-link . 2024.05.11 23:54:07 - 18 291 fe80::/64 On-link . 2024.05.11 23:54:07 - 20 261 fe80::/64 On-link . 2024.05.11 23:54:07 - 20 261 fe80::6b74:d313:f7c:5a8f/128 . 2024.05.11 23:54:07 - On-link . 2024.05.11 23:54:07 - 18 291 fe80::8713:dad1:d66a:6b73/128 . 2024.05.11 23:54:07 - On-link . 2024.05.11 23:54:07 - 1 331 ff00::/8 On-link . 2024.05.11 23:54:07 - 18 291 ff00::/8 On-link . 2024.05.11 23:54:07 - 20 261 ff00::/8 On-link . 2024.05.11 23:54:07 - =========================================================================== . 2024.05.11 23:54:07 - Persistent Routes: . 2024.05.11 23:54:07 - None' . 2024.05.11 23:54:07 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 add route fde6:7a:7d20:1dab::/64 20 fe80::8 store=active . 2024.05.11 23:54:07 - OpenVPN > env_block: add PATH=C:\WINDOWS\System32;C:\WINDOWS;C:\WINDOWS\System32\Wbem . 2024.05.11 23:54:07 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete dns 20 all . 2024.05.11 23:54:08 - OpenVPN > IPv6 MTU set to 1500 on interface 20 using SetIpInterfaceEntry() . 2024.05.11 23:54:08 - OpenVPN > Initialization Sequence Completed . 2024.05.11 23:54:08 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv4 . 2024.05.11 23:54:08 - Elevated: Command:set-interface-metric . 2024.05.11 23:54:08 - Interface Local Area Connection metric changed from Automatic to 3, layer IPv6 . 2024.05.11 23:54:08 - Elevated: Command:set-interface-metric . 2024.05.11 23:54:08 - Elevated: Command:wfp . 2024.05.11 23:54:08 - Elevated: Command:wfp . 2024.05.11 23:54:08 - Elevated: Command:wfp . 2024.05.11 23:54:08 - Above log line repeated 3 times more . 2024.05.11 23:54:08 - DNS leak protection with packet filtering enabled. . 2024.05.11 23:54:08 - Elevated: Command:route-list . 2024.05.11 23:54:08 - Elevated: Command:windows-dns . 2024.05.11 23:54:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=static address=10.33.171.1 register=primary validate=no', exit:0 . 2024.05.11 23:54:09 - DNS IPv4 of a network adapter forced (Local Area Connection, from automatic to 10.33.171.1) . 2024.05.11 23:54:09 - Elevated: Command:windows-dns . 2024.05.11 23:54:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=static address=fde6:7a:7d20:1dab::1 register=primary validate=no', exit:0 . 2024.05.11 23:54:09 - DNS IPv6 of a network adapter forced (Local Area Connection, from automatic to fde6:7a:7d20:1dab::1) . 2024.05.11 23:54:09 - Elevated: Command:windows-dns . 2024.05.11 23:54:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=static address=10.33.171.1 register=primary validate=no', exit:0 . 2024.05.11 23:54:09 - DNS IPv4 of a network adapter forced (Ethernet, from automatic to 10.33.171.1) . 2024.05.11 23:54:09 - Elevated: Command:windows-dns . 2024.05.11 23:54:09 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=static address=fde6:7a:7d20:1dab::1 register=primary validate=no', exit:0 . 2024.05.11 23:54:09 - DNS IPv6 of a network adapter forced (Ethernet, from automatic to fde6:7a:7d20:1dab::1) . 2024.05.11 23:54:10 - Elevated: Command:route-list . 2024.05.11 23:54:10 - Elevated: Command:route . 2024.05.11 23:54:10 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="0.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:10 - Routes, add 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:10 - Elevated: Command:route-list . 2024.05.11 23:54:11 - Elevated: Command:route . 2024.05.11 23:54:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="128.0.0.0/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:11 - Routes, add 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:11 - Elevated: Command:route-list . 2024.05.11 23:54:11 - Elevated: Command:route . 2024.05.11 23:54:11 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:11 - Routes, add ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:12 - Elevated: Command:route-list . 2024.05.11 23:54:12 - Elevated: Command:route . 2024.05.11 23:54:12 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="8000::/1" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:12 - Routes, add 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:13 - Elevated: Command:route-list . 2024.05.11 23:54:13 - Elevated: Command:route . 2024.05.11 23:54:13 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 add route prefix="134.19.179.139/32" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:13 - Routes, add 134.19.179.139/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:13 - Elevated: Command:route-list . 2024.05.11 23:54:13 - Elevated: Command:route . 2024.05.11 23:54:14 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 add route prefix="2a00:1678:2470:bbbb:2215:4536:db1a:dc40/128" interface="20" metric=0 store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:14 - Routes, add 2a00:1678:2470:bbbb:2215:4536:db1a:dc40/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:14 - Flushing DNS . 2024.05.11 23:54:14 - Elevated: Command:dns-flush . 2024.05.11 23:54:14 - Elevated: Exec, path:'C:\WINDOWS\system32\net.exe', arg:'/flushdns', exit:1, err:'The syntax of this command is: . 2024.05.11 23:54:14 - NET . 2024.05.11 23:54:14 - [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | . 2024.05.11 23:54:14 - HELPMSG | LOCALGROUP | PAUSE | SESSION | SHARE | START | . 2024.05.11 23:54:14 - STATISTICS | STOP | TIME | USE | USER | VIEW ]' . 2024.05.11 23:54:14 - Exec(5) of 'C:\WINDOWS\system32\ipconfig.exe', 1 args: '/flushdns'; . 2024.05.11 23:54:14 - Exec(5) done in 78 ms, exit: 0, out: 'Windows IP Configuration . 2024.05.11 23:54:14 - Successfully flushed the DNS Resolver Cache.' ! 2024.05.11 23:54:14 - Disconnecting . 2024.05.11 23:54:14 - Sending soft termination signal . 2024.05.11 23:54:14 - Elevated: Command:openvpn . 2024.05.11 23:54:17 - OpenVPN > Closing TUN/TAP interface . 2024.05.11 23:54:17 - OpenVPN > delete_route_ipv6(fde6:7a:7d20:1dab::/64) . 2024.05.11 23:54:17 - OpenVPN > C:\WINDOWS\system32\netsh.exe interface ipv6 delete route fde6:7a:7d20:1dab::/64 20 fe80::8 store=active . 2024.05.11 23:54:17 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 delete address 20 fde6:7a:7d20:1dab::105c store=active . 2024.05.11 23:54:17 - OpenVPN > NETSH: C:\WINDOWS\system32\netsh.exe interface ipv4 delete address 20 10.33.171.94 store=active . 2024.05.11 23:54:17 - OpenVPN > SIGTERM[hard,] received, process exiting . 2024.05.11 23:54:17 - Elevated: Command:route-list . 2024.05.11 23:54:17 - Elevated: Command:route . 2024.05.11 23:54:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="0.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:18 - Routes, delete 0.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:18 - Elevated: Command:route-list . 2024.05.11 23:54:18 - Elevated: Command:route . 2024.05.11 23:54:18 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="128.0.0.0/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:18 - Routes, delete 128.0.0.0/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:19 - Elevated: Command:route-list . 2024.05.11 23:54:19 - Elevated: Command:route . 2024.05.11 23:54:19 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:19 - Routes, delete ::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:19 - Elevated: Command:route-list . 2024.05.11 23:54:19 - Elevated: Command:route . 2024.05.11 23:54:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="8000::/1" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:20 - Routes, delete 8000::/1 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:20 - Elevated: Command:route-list . 2024.05.11 23:54:20 - Elevated: Command:route . 2024.05.11 23:54:20 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.141/32" interface="18" nexthop="192.168.1.254" store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:20 - Routes, delete 134.19.179.141/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)". . 2024.05.11 23:54:21 - Elevated: Command:route-list . 2024.05.11 23:54:21 - Elevated: Command:route . 2024.05.11 23:54:21 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 del route prefix="134.19.179.139/32" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:21 - Routes, delete 134.19.179.139/32 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:21 - Elevated: Command:route-list . 2024.05.11 23:54:21 - Elevated: Command:route . 2024.05.11 23:54:22 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 del route prefix="2a00:1678:2470:bbbb:2215:4536:db1a:dc40/128" interface="20" store=active', exit:0, out:'Ok.' . 2024.05.11 23:54:22 - Routes, delete 2a00:1678:2470:bbbb:2215:4536:db1a:dc40/128 for interface "Local Area Connection (Wintun Userspace Tunnel)". . 2024.05.11 23:54:22 - Elevated: Command:route-list . 2024.05.11 23:54:22 - Routes, delete 134.19.179.141/32 for interface "Ethernet (Intel(R) Ethernet Connection (2) I218-LM)", not exists. . 2024.05.11 23:54:22 - Elevated: Command:windows-dns . 2024.05.11 23:54:22 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:54:22 - DNS IPv4 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:54:22 - Elevated: Command:windows-dns . 2024.05.11 23:54:22 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Local Area Connection" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:54:22 - DNS IPv6 of a network adapter restored to original settings (Local Area Connection, to automatic) . 2024.05.11 23:54:22 - Elevated: Command:windows-dns . 2024.05.11 23:54:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv4 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:54:23 - DNS IPv4 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:54:23 - Elevated: Command:windows-dns . 2024.05.11 23:54:23 - Elevated: Exec, path:'C:\WINDOWS\system32\netsh.exe', arg:'interface ipv6 set dns name="Ethernet" source=dhcp register=primary validate=no', exit:0 . 2024.05.11 23:54:23 - DNS IPv6 of a network adapter restored to original settings (Ethernet, to automatic) . 2024.05.11 23:54:23 - Elevated: Command:wfp . 2024.05.11 23:54:23 - Elevated: Command:wfp . 2024.05.11 23:54:23 - Elevated: Command:wfp . 2024.05.11 23:54:23 - Above log line repeated 3 times more . 2024.05.11 23:54:23 - DNS leak protection with packet filtering disabled. . 2024.05.11 23:54:23 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv4 . 2024.05.11 23:54:23 - Elevated: Command:set-interface-metric . 2024.05.11 23:54:23 - Interface Local Area Connection metric restored from 3 to Automatic, layer IPv6 . 2024.05.11 23:54:23 - Elevated: Command:set-interface-metric . 2024.05.11 23:54:23 - Elevated: Command:wfp . 2024.05.11 23:54:23 - Elevated: Command:wfp . 2024.05.11 23:54:23 - Elevated: Command:wfp . 2024.05.11 23:54:23 - Above log line repeated 9 times more . 2024.05.11 23:54:23 - Connection terminated. I 2024.05.11 23:54:23 - Cancel requested. . 2024.05.11 23:54:23 - Elevated: Command:wintun-adapter-removepool ! 2024.05.11 23:54:23 - Session terminated. Edited ... by OpenSourcerer Apply LOG format to logs Quote Share this post Link to post
OpenSourcerer 1435 Posted ... Refer to this thread:. Quote Hide OpenSourcerer's signature Hide all signatures NOT AN AIRVPN TEAM MEMBER. USE TICKETS FOR PROFESSIONAL SUPPORT. LZ1's New User Guide to AirVPN « Plenty of stuff for advanced users, too! Want to contact me directly? All relevant methods are on my About me page. Share this post Link to post