Apr 12 20:03:08 debian-proxy (squid-1): 1681318988.337      0 172.20.30.17 TCP_DENIED/407 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 296 3914 CONNECT www.google.com:443 test_user HIER_NONE/- text/html 51086
Apr 12 20:03:21 debian-proxy (squid-1): 1681319001.391     96 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51114
Apr 12 20:03:21 debian-proxy (squid-1): 1681319001.427     34 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51116
Apr 12 20:03:22 debian-proxy (squid-1): 1681319002.437     97 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51119
Apr 12 20:03:22 debian-proxy (squid-1): 1681319002.446     94 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 312 0 CONNECT static.doubleclick.net:443 test_user HIER_DIRECT/static.doubleclick.net - 51120
Apr 12 20:03:22 debian-proxy (squid-1): 1681319002.469     31 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51122
Apr 12 20:03:22 debian-proxy (squid-1): 1681319002.483     36 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 312 0 CONNECT static.doubleclick.net:443 test_user HIER_DIRECT/static.doubleclick.net - 51123
Apr 12 20:03:22 debian-proxy (squid-1): 1681319002.668     89 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 308 0 CONNECT adservice.google.com:443 test_user HIER_DIRECT/adservice.google.com - 51125
Apr 12 20:03:22 debian-proxy (squid-1): 1681319002.707     37 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 308 0 CONNECT adservice.google.com:443 test_user HIER_DIRECT/adservice.google.com - 51126
Apr 12 20:03:33 debian-proxy (squid-1): 1681319013.112     35 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51138
Apr 12 20:03:34 debian-proxy (squid-1): 1681319014.275     33 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51142
Apr 12 20:03:34 debian-proxy (squid-1): 1681319014.312     35 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51143
Apr 12 20:03:35 debian-proxy (squid-1): 1681319015.392    129 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51145
Apr 12 20:03:35 debian-proxy (squid-1): 1681319015.400    125 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 312 0 CONNECT static.doubleclick.net:443 test_user HIER_DIRECT/static.doubleclick.net - 51146
Apr 12 20:03:35 debian-proxy (squid-1): 1681319015.433     39 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51147
Apr 12 20:03:35 debian-proxy (squid-1): 1681319015.438     37 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 312 0 CONNECT static.doubleclick.net:443 test_user HIER_DIRECT/static.doubleclick.net - 51148
Apr 12 20:03:35 debian-proxy (squid-1): 1681319015.537     45 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 308 0 CONNECT adservice.google.com:443 test_user HIER_DIRECT/adservice.google.com - 51149
Apr 12 20:03:35 debian-proxy (squid-1): 1681319015.576     37 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 308 0 CONNECT adservice.google.com:443 test_user HIER_DIRECT/adservice.google.com - 51150
Apr 12 20:03:42 debian-proxy (squid-1): 1681319022.969   5827 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 7898 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51153
Apr 12 20:03:43 debian-proxy (squid-1): 1681319023.398   6330 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 19992 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51152
Apr 12 20:03:47 debian-proxy (squid-1): 1681319027.497  14517 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 4929 CONNECT apis.google.com:443 test_user HIER_DIRECT/apis.google.com - 51137
Apr 12 20:03:47 debian-proxy (squid-1): 1681319027.497  14411 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 302 4937 CONNECT fonts.gstatic.com:443 test_user HIER_DIRECT/fonts.gstatic.com - 51139
Apr 12 20:03:47 debian-proxy (squid-1): 1681319027.537     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51163
Apr 12 20:03:47 debian-proxy (squid-1): 1681319027.571     32 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51164
Apr 12 20:04:06 debian-proxy (squid-1): 1681319046.323     35 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51184
Apr 12 20:04:06 debian-proxy (squid-1): 1681319046.357     33 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51185
Apr 12 20:04:06 debian-proxy (squid-1): 1681319046.376   5613 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 4797 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51176
Apr 12 20:04:21 debian-proxy (squid-1): 1681319061.435  20672 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 587 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51177
Apr 12 20:04:27 debian-proxy (squid-1): 1681319067.314     33 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51206
Apr 12 20:04:27 debian-proxy (squid-1): 1681319067.354     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51207
Apr 12 20:04:29 debian-proxy (squid-1): 1681319069.320     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51211
Apr 12 20:04:29 debian-proxy (squid-1): 1681319069.357     35 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51212
Apr 12 20:04:39 debian-proxy (squid-1): 1681319079.373   5895 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 102489 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51216
Apr 12 20:04:39 debian-proxy (squid-1): 1681319079.406   5927 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 106383 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51217
Apr 12 20:05:09 debian-proxy (squid-1): 1681319109.318     34 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51258
Apr 12 20:05:09 debian-proxy (squid-1): 1681319109.358     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51259
Apr 12 20:05:36 debian-proxy (squid-1): 1681319136.324     40 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51284
Apr 12 20:05:36 debian-proxy (squid-1): 1681319136.363     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51286
Apr 12 20:05:47 debian-proxy (squid-1): 1681319147.216   4285 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 219211 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51292
Apr 12 20:05:49 debian-proxy (squid-1): 1681319149.318     31 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51302
Apr 12 20:05:49 debian-proxy (squid-1): 1681319149.357     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51303
Apr 12 20:05:49 debian-proxy (squid-1): 1681319149.415   6483 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 1069926 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51293
Apr 12 20:05:50 debian-proxy (squid-1): 1681319150.025   6534 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 775517 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51294
Apr 12 20:05:50 debian-proxy (squid-1): 1681319150.042   6550 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 926365 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51296
Apr 12 20:05:50 debian-proxy (squid-1): 1681319150.132   6640 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 541873 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51297
Apr 12 20:05:50 debian-proxy (squid-1): 1681319150.388   6896 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 1423662 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51295
Apr 12 20:06:04 debian-proxy (squid-1): 1681319164.787   7978 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 15462101 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51312
Apr 12 20:06:10 debian-proxy (squid-1): 1681319170.801  13989 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 563 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51313
Apr 12 20:06:30 debian-proxy (squid-1): 1681319190.214  19413 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 854838 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51327
Apr 12 20:06:32 debian-proxy (squid-1): 1681319192.321     32 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51352
Apr 12 20:06:32 debian-proxy (squid-1): 1681319192.357     34 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51353
Apr 12 20:06:59 debian-proxy (squid-1): 1681319219.707  38367 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 10610293 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51340
Apr 12 20:07:21 debian-proxy (squid-1): 1681319241.281 240094 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 306 7804 CONNECT clients1.google.com:443 test_user HIER_DIRECT/clients1.google.com - 51112
Apr 12 20:07:33 debian-proxy (squid-1): 1681319253.539 253030 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 294 8459 CONNECT id.google.com:443 test_user HIER_DIRECT/id.google.com - 51109
Apr 12 20:07:34 debian-proxy (squid-1): 1681319254.051 253113 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 290 22434 CONNECT i.ytimg.com:443 test_user HIER_DIRECT/i.ytimg.com - 51111
Apr 12 20:07:35 debian-proxy (squid-1): 1681319255.077 254139 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 719839 CONNECT www.gstatic.com:443 test_user HIER_DIRECT/www.gstatic.com - 51110
Apr 12 20:07:35 debian-proxy (squid-1): 1681319255.647 253232 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 310 72157 CONNECT jnn-pa.googleapis.com:443 test_user HIER_DIRECT/jnn-pa.googleapis.com - 51121
Apr 12 20:07:37 debian-proxy (squid-1): 1681319257.326     33 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51420
Apr 12 20:07:37 debian-proxy (squid-1): 1681319257.366     39 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 322 0 CONNECT googleads.g.doubleclick.net:443 test_user HIER_DIRECT/googleads.g.doubleclick.net - 51421
Apr 12 20:07:50 debian-proxy (squid-1): 1681319270.332 268826 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 959700 CONNECT www.youtube.com:443 test_user HIER_DIRECT/www.youtube.com - 51117
Apr 12 20:08:27 debian-proxy (squid-1): 1681319307.485 240129 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 288 8483 CONNECT google.com:443 test_user HIER_DIRECT/google.com - 51208
Apr 12 20:08:32 debian-proxy (squid-1): 1681319312.561 141757 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 332 15462101 CONNECT www.malware-traffic-analysis.net:443 test_user HIER_DIRECT/www.malware-traffic-analysis.net - 51328
Apr 12 20:08:32 debian-proxy (squid-1): 1681319312.837 240105 172.20.30.17 TCP_MISS/200 Chrome%20WIN%2070.0.3538.110%20(ca97ba107095b2a88cf04f9135463301e685cbb0-refs/branch-heads/3538@%7B%231094%7D)%20channel(stable) 306 8310 CONNECT clients4.google.com:443 test_user HIER_DIRECT/clients4.google.com - 51215
Apr 12 20:08:43 debian-proxy (squid-1): 1681319323.350     54 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51501
Apr 12 20:08:43 debian-proxy (squid-1): 1681319323.389     37 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51502
Apr 12 20:09:09 debian-proxy (squid-1): 1681319349.331     34 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51531
Apr 12 20:09:09 debian-proxy (squid-1): 1681319349.371     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 51532
Apr 12 20:10:35 debian-proxy (squid-1): 1681319435.370 435692 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 296 2203910 CONNECT www.google.com:443 test_user HIER_DIRECT/www.google.com - 51086
Apr 12 20:10:59 debian-proxy (squid-1): 1681319459.859 315405 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 306 10555 CONNECT clients2.google.com:443 test_user HIER_DIRECT/clients2.google.com - 51298
Apr 12 20:12:43 debian-proxy (squid-1): 1681319563.423 521263 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 308 6660 CONNECT beacons.gcp.gvt2.com:443 test_user HIER_DIRECT/beacons.gcp.gvt2.com - 51179
Apr 12 20:12:59 debian-proxy (squid-1): 1681319579.773 300038 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 302 6781 CONNECT beacons4.gvt2.com:443 test_user HIER_DIRECT/beacons4.gvt2.com - 51446
Apr 12 20:13:27 debian-proxy (squid-1): 1681319607.348     38 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 9427
Apr 12 20:13:27 debian-proxy (squid-1): 1681319607.383     33 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 9428
Apr 12 20:13:34 debian-proxy (squid-1): 1681319614.346     34 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 9437
Apr 12 20:13:34 debian-proxy (squid-1): 1681319614.385     37 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 9438
Apr 12 20:13:36 debian-proxy (squid-1): 1681319616.345     35 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 9442
Apr 12 20:13:36 debian-proxy (squid-1): 1681319616.381     33 172.20.30.17 TCP_MISS/200 Mozilla/5.0%20(Windows%20NT%206.3;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/70.0.3538.110%20Safari/537.36 298 0 CONNECT play.google.com:443 test_user HIER_DIRECT/play.google.com - 9443